[Resolved] have win me2000 will not shut down

[yiksney]

win me 2000 will not shut down
tried dr watson it points to mmtask.tsk as error
? how to fix or what to do?

 

[Rollin' Rog]

yiksney welcome to TSG. I'm going to assume you have WinME, since there is no such animal as WinME 2000.

In any case could you provide us with a post of your startups using the StartupList application from the site below. Just download, unzip and run it, then copy/paste the results to a reply.

http://www.lurkhere.com/~nicefiles/

And how long has the problem existed, have you installed or uninstalled anything in the last few days? What exactly happens when you try to shut down, is it hanging on a specific screen or rebooting?

 

[yiksney]

yiksney welcome to TSG. I'm going to assume you have WinME, since there is no such animal as WinME 2000.

In any case could you provide us with a post of your startups using the StartupList application from the site below. Just download, unzip and run it, then copy/paste the results to a reply.

http://www.lurkhere.com/~nicefiles/

And how long has the problem existed, have you installed or uninstalled anything in the last few days? What exactly happens when you try to shut down, is it hanging on a specific screen or rebooting?

i got to the site to download start up files it stopped at 99 % trying to load choose download from this location
2nd attempt using 3 1/2 floppy it said file completed but when tried to open nothing / and using file open 3 12 floppy it does not appear in list of whats on floppy
unistlled PAL TALK after probolem began
have tried system restore using jan 1 2003 as restore date
because problem began after that about a week old now
computer will not shut down have to turn off electric power
it hangs /freezes after shut down command the screen goes blank with a cursor flashing at upper right hand corner
i deleted some unkown thing out of starup menu today
i could figure out how to unistall it so just deleted and then emptied recycle bin of it
i am no expert thank you for bearing with

 

[yiksney]

PK
this is what i got using word
when i attempted to get start up files
arg
PK
now it has disappeared i did a select all then copy it
and it did not paste it here
jees
each step is not working nothing is working

 

[Rollin' Rog]

When you try to save the startuplist.zip, right click on the downlowad url and select "save target as". When prompted for a download directory, select the Desktop.

The file should download as .zip file so you need a zip program to unzip it (extract), only when you have startuplist.exe extracted can you run it.

If you cannot succeed in getting the StartpList to run, try downloading the following program to the desktop; then doubleclick it to run and copy/paste the Startup.log, (but not the stubpaths.txt file) to a reply.

http://home.earthlink.net/~rmbox/Reticulated/4IE_Only/StartLog.com

 

[yiksney]

yiksney use to id me
wrote to u about winme not shutiing down
ur reply go to page download startup file finder
tried got froze at 99% = run from this location
tried save to disc it went on a floppy
aol could not open to copy and paste
tried word pad opened as code i think all jibberish
tried to copy and apste that to send u would work
not sure how to respond to u on this even
where prev reply are ? etc
u asked when problem occured about a week ago
after problem i unistalled PAL TALK never used it
did not help
looked at HELP SECTION ..........not much help
dr watson thing says mmtask.tsk try to quit or i dont remember what it said .......but have no idea how to do that either
have used search to get list of start up list
it shows 2 files that look like they dont belong
c:\windows\system\khooker
c:\windows\system\mp_s3exe
i do not know how to unistall these or how to delete them
yiksney
an email says u replied but when i copy the whole address it wont open says try another spelling so i just opened this and tried to reply here
arg

 

[Rollin' Rog]

yiksney, do NOT Left Click on the url below, you do not want to run it from current location.

RIGHT CLICK on it.

You will see a menu that includes "Save Target As". Choose that.

You should then see a window which allows you to select where to save it to. Left Click the Desktop icon. Then Left Click "Save". It should only take a second. Then go to your desktop and double left click the file to run it.

When it has run, you will see a log named "Startup.log". Click Edit>Select All>Edit>Copy and then paste the copied text to a reply here. OR attach the file using the "attach" button

http://home.earthlink.net/~rmbox/Reticulated/4IE_Only/StartLog.com

by the way, the khooker file is for your Video Drivers, I don't know what the other is.

You should also try running an Online Virus Scan. Try to run HouseCall. This one you do left click on...

http://housecall.trendmicro.com/housecall/start_corp.asp

 

[Rollin' Rog]

This entry indicates you have the "Klez" worm.

"Winkkl"="C:\\WINDOWS\\SYSTEM\\Winkkl.exe"

To remove it you will need a removal tool such as the one from Symantec that I'm going to link you to. You must follow their instructions for disabling System Restore before running it. And then reboot in Safe Mode to do so.

Follow the instruction under "Obtaining and Running the Tool"; Read down lower on how to disable System Restore in WinME.

http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.removal.tool.html

When you have finished, give us another post of your startups. If you can get the other StartupList program great (follow the same directions for downloading, then unzip and run it), but otherwise, just re-run the one you have now. I believe WinME has its own zip utility so you may not need one to unzip a file with a .zip extension. This is not to be confused with a "zip drive" which is something entirely different.

You also have some "spyware", but we will address that after Klez is cleaned off the system

 

[yiksney]

here is new list after i did get the klez remover to work
after soem trial and error

---------- C:\WINDOWS\desktop\StartUp.Log

Start-Ups checked at 01-17-2003 2:31:18.74a
__________________________________________________________________________
__________________________________________________________________________

StartUp Log for Windows 95/98 - Freeware by rmbox
__________________________________________________________________________
__________________________________________________________________________

Comments:

This is a log of all the programs on your computer that
are starting automatically every time you start Windows.
Using this log can be a quick way to spot trojans.

StartUp Log (version 1.58) - Release Date 11/9/2002

__________________________________________________________________________
__________________________________________________________________________

StartUp Log Index

1. HKLM Run
2. HKCU Run
3. HKLM RunOnce
4. HKCU RunOnce
5. HKLM RunServices
6. HKLM RunServicesOnce
7. WIN.INI file
8. SYSTEM.INI file
9. AUTOEXEC.BAT file
10. StartUp folder
11. All Users StartUp
12. Misc. StartUp Configurations

__________________________________________________________________________
__________________________________________________________________________

The following is a list of your current Start-Ups
__________________________________________________________________________
__________________________________________________________________________

1. HKLM Run - Registry

[RegPath]
"StartUp"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TaskMonitor"="C:\\WINDOWS\\taskmon.exe"
"PCHealth"="C:\\WINDOWS\\PCHealth\\Support\\PCHSchd.exe -s"
"SystemTray"="SysTray.Exe"
"LoadPowerProfile"="Rundll32.exe powrprof.dll,LoadCurrentPwrScheme"
"SiSAudio"="C:\\WINDOWS\\system\\MP_S3.exe"
"SiS Tray"=""
"SiS KHooker"="C:\\WINDOWS\\SYSTEM\\khooker.exe"
"PCTVOICE"="pctvoice.exe"
"CMESys"="\"C:\\PROGRAM FILES\\COMMON FILES\\CMEII\\CMESYS.EXE\""
"Mirabilis ICQ"="C:\\Program Files\\ICQ\\NDetect.exe"
"RealTray"="C:\\Program Files\\Real\\RealPlayer\\RealPlay.exe SYSTEMBOOTHIDEPLAYER"


==========================================================================
__________________________________________________________________________

2. HKCU Run - Registry

[RegPath]
"StartUp"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Mozilla Quick Launch"="\"C:\\Program Files\\Netscape\\Netscape\\Netscp.exe\" -turbo"


==========================================================================
__________________________________________________________________________

3. HKLM RunOnce - Registry

[RegPath]
"StartUp"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]


==========================================================================
__________________________________________________________________________

4. HKCU RunOnce - Registry

[RegPath]
"StartUp"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"ICQ"="C:\\PROGRAM FILES\\ICQ\\ICQ.EXE -trayboot"


==========================================================================
__________________________________________________________________________

5. HKLM RunServices - Registry

[RegPath]
"StartUp"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
"LoadPowerProfile"="Rundll32.exe powrprof.dll,LoadCurrentPwrScheme"
"SchedulingAgent"="mstask.exe"
"*StateMgr"="C:\\WINDOWS\\System\\Restore\\StateMgr.exe"


==========================================================================
__________________________________________________________________________

6. HKLM RunServicesOnce - Registry

[RegPath]
"StartUp"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce]


==========================================================================
__________________________________________________________________________

7. WIN.INI File - (c:\windows\win.ini)

Your win.ini run/load lines should look like run= and load= exclusively.
There should be nothing to the right of the equal signs.


These are the run and load lines in your WIN.INI file

run=

load=

==========================================================================
__________________________________________________________________________

8. SYSTEM.INI File - (c:\windows\system.ini)

Your system.ini shell line should look like shell=Explorer.exe exclusively.
You should only see Explorer.exe following the equal sign.


This is the shell line in your SYSTEM.INI file

shell=Explorer.exe

==========================================================================
__________________________________________________________________________

9. AUTOEXEC.BAT File - (c:\autoexec.bat)

(Some trojans have been known to start from this file)


These are your program startups and set paths in your autoexec.bat file


==========================================================================
__________________________________________________________________________

10. StartUp Folder - (c:\windows\start menu\programs\startup)

Shortcuts to any program will automatically start when placed here.


These are the shortcuts located in your StartUp folder

C:\WINDOWS\Start Menu\Programs\StartUp\AlarOnli.lnk
C:\WINDOWS\Start Menu\Programs\StartUp\America Online 8.0 Tray Icon.lnk
C:\WINDOWS\Start Menu\Programs\StartUp\GStartup.lnk
C:\WINDOWS\Start Menu\Programs\StartUp\PrecisionTime.lnk
C:\WINDOWS\Start Menu\Programs\StartUp\Date Manager.lnk
C:\WINDOWS\Start Menu\Programs\StartUp\Gator eWallet.lnk
C:\WINDOWS\Start Menu\Programs\StartUp\Microsoft Find Fast.lnk
C:\WINDOWS\Start Menu\Programs\StartUp\Office Startup.lnk

==========================================================================
__________________________________________________________________________

11. All Users Folder - (c:\windows\all users\start menu\programs\startup)

Shortcuts to any program will automatically start when placed here.


These are the shortcuts located in your All Users StartUp folder


*(No start-ups found)*

==========================================================================
__________________________________________________________________________

12. Miscellaneous StartUp Configurations

-============================-
Registry StartUp Directories
-============================-

Should show the Start Menu StartUp and All Users StartUp directories

.....................................................................

[1] HKCU - Shell Folders

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

"Startup"="C:\\WINDOWS\\Start Menu\\Programs\\StartUp"

.....................................................................

[2] HKCU - User Shell Folders

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders


.....................................................................

[3] HKLM - Shell Folders

HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\Shell Folders

"Common Startup"="C:\\WINDOWS\\All Users\\Start Menu\\Programs\\StartUp"

.....................................................................

[4] HKLM - User Shell Folders

HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\User Shell Folders


.....................................................................

-=======================-
Registry Shell Spawning
-=======================-

Open Commands for Executable File Types

@="\"%1\" %*"
(.exe file - RegPath = HKCR\exefile\shell\open\command)

@="\"%1\" %*"
(.com file - RegPath = HKCR\comfile\shell\open\command)

@="\"%1\" /S"
(.scr file - RegPath = HKCR\scrfile\shell\open\command)

@="\"%1\" %*"
(.bat file - RegPath = HKCR\batfile\shell\open\command)

@="\"%1\" %*"
(.pif file - RegPath = HKCR\piffile\shell\open\command)

@="C:\\WINDOWS\\SYSTEM\\MSHTA.EXE \"%1\" %*"
(.hta file - RegPath = HKCR\htafile\shell\open\command)

-=========================-
HKLM RunOnceEx - Registry
-=========================-


[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnceEx]


-=========================-
HKU (.Default) Run - Registry
-=========================-


[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Run]
"Mozilla Quick Launch"="\"C:\\Program Files\\Netscape\\Netscape\\Netscp.exe\" -turbo"


-==============================-
HKU (.Default) RunOnce - Registry
-==============================-


[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"ICQ"="C:\\PROGRAM FILES\\ICQ\\ICQ.EXE -trayboot"


-================================-
StubPaths - Registry (Partial Listing)
-================================-

(Please see the StubPath.txt on your desktop for complete listing)

HKLM\Software\Microsoft\Active Setup\Installed Components


"StubPath"="C:\\WINDOWS\\msnmgsr1.exe"
"StubPath"="C:\\WINDOWS\\COMMAND\\sulfnbk.exe /L"
"StubPath"=""
"StubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:OE /CALLER:IE50 /user /install"
"StubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:WAB /CALLER:IE50 /user /install"
"StubPath"="C:\\WINDOWS\\SYSTEM\\ie4uinit.exe"
"StubPath"="C:\\WINDOWS\\SYSTEM\\updcrl.exe -e -u C:\\WINDOWS\\SYSTEM\\verisignpub1.crl"

-=================-
WINSTART.BAT File - (c:\windows\winstart.bat)
-=================-

@C:\WINDOWS\tmpcpyis.bat

-=================-
WININIT.BAK File - (c:\windows\wininit.bak)
(name) (type) (size)(modified)(time)
wininit bak 56 01-16-03 10:09a
-=================-

[Rename]
NUL=C:\PROGRA~1\AMERIC~1.0\JITI\REAL9_~1.EXE
-=====================-
Screen Saver Settings (Possible system.ini start-up)
-=====================-

SCRNSAVE.EXE=C:\WINDOWS\SYSTEM\3DCHRI~1.SCR

==========================================================================
__________________________________________________________________________

- Supplemental Environment Information -

COMSPEC=C:\WINDOWS\COMMAND.COM
PATH=C:\WINDOWS;C:\WINDOWS\COMMAND
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
winbootdir=C:\WINDOWS
windir=C:\WINDOWS

File - c:\windows\Wininit.bak
File - c:\windows\deletefi.ini

==========================================================================
__________________________________________________________________________

- End -

 

[yiksney]

i went online and found a spyware removal ran it it said removed items ? here is new list
i get lost when ur talking about zip and exe etc
thanks for your help is was very good

---------- C:\WINDOWS\desktop\StartUp.Log

Start-Ups checked at 01-17-2003 10:58:52.12a
__________________________________________________________________________
__________________________________________________________________________

StartUp Log for Windows 95/98 - Freeware by rmbox
__________________________________________________________________________
__________________________________________________________________________

Comments:

This is a log of all the programs on your computer that
are starting automatically every time you start Windows.
Using this log can be a quick way to spot trojans.

StartUp Log (version 1.58) - Release Date 11/9/2002

__________________________________________________________________________
__________________________________________________________________________

StartUp Log Index

1. HKLM Run
2. HKCU Run
3. HKLM RunOnce
4. HKCU RunOnce
5. HKLM RunServices
6. HKLM RunServicesOnce
7. WIN.INI file
8. SYSTEM.INI file
9. AUTOEXEC.BAT file
10. StartUp folder
11. All Users StartUp
12. Misc. StartUp Configurations

__________________________________________________________________________
__________________________________________________________________________

The following is a list of your current Start-Ups
__________________________________________________________________________
__________________________________________________________________________

1. HKLM Run - Registry

[RegPath]
"StartUp"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TaskMonitor"="C:\\WINDOWS\\taskmon.exe"
"PCHealth"="C:\\WINDOWS\\PCHealth\\Support\\PCHSchd.exe -s"
"SystemTray"="SysTray.Exe"
"LoadPowerProfile"="Rundll32.exe powrprof.dll,LoadCurrentPwrScheme"
"SiSAudio"="C:\\WINDOWS\\system\\MP_S3.exe"
"SiS Tray"=""
"SiS KHooker"="C:\\WINDOWS\\SYSTEM\\khooker.exe"
"PCTVOICE"="pctvoice.exe"
"Mirabilis ICQ"="C:\\Program Files\\ICQ\\NDetect.exe"
"RealTray"="C:\\Program Files\\Real\\RealPlayer\\RealPlay.exe SYSTEMBOOTHIDEPLAYER"


==========================================================================
__________________________________________________________________________

2. HKCU Run - Registry

[RegPath]
"StartUp"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Mozilla Quick Launch"="\"C:\\Program Files\\Netscape\\Netscape\\Netscp.exe\" -turbo"


==========================================================================
__________________________________________________________________________

3. HKLM RunOnce - Registry

[RegPath]
"StartUp"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]


==========================================================================
__________________________________________________________________________

4. HKCU RunOnce - Registry

[RegPath]
"StartUp"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"ICQ"="C:\\PROGRAM FILES\\ICQ\\ICQ.EXE -trayboot"


==========================================================================
__________________________________________________________________________

5. HKLM RunServices - Registry

[RegPath]
"StartUp"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
"LoadPowerProfile"="Rundll32.exe powrprof.dll,LoadCurrentPwrScheme"
"SchedulingAgent"="mstask.exe"
"*StateMgr"="C:\\WINDOWS\\System\\Restore\\StateMgr.exe"


==========================================================================
__________________________________________________________________________

6. HKLM RunServicesOnce - Registry

[RegPath]
"StartUp"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce]


==========================================================================
__________________________________________________________________________

7. WIN.INI File - (c:\windows\win.ini)

Your win.ini run/load lines should look like run= and load= exclusively.
There should be nothing to the right of the equal signs.


These are the run and load lines in your WIN.INI file

run=

load=

==========================================================================
__________________________________________________________________________

8. SYSTEM.INI File - (c:\windows\system.ini)

Your system.ini shell line should look like shell=Explorer.exe exclusively.
You should only see Explorer.exe following the equal sign.


This is the shell line in your SYSTEM.INI file

shell=Explorer.exe

==========================================================================
__________________________________________________________________________

9. AUTOEXEC.BAT File - (c:\autoexec.bat)

(Some trojans have been known to start from this file)


These are your program startups and set paths in your autoexec.bat file


==========================================================================
__________________________________________________________________________

10. StartUp Folder - (c:\windows\start menu\programs\startup)

Shortcuts to any program will automatically start when placed here.


These are the shortcuts located in your StartUp folder

C:\WINDOWS\Start Menu\Programs\StartUp\AlarOnli.lnk
C:\WINDOWS\Start Menu\Programs\StartUp\America Online 8.0 Tray Icon.lnk
C:\WINDOWS\Start Menu\Programs\StartUp\Microsoft Find Fast.lnk
C:\WINDOWS\Start Menu\Programs\StartUp\Office Startup.lnk

==========================================================================
__________________________________________________________________________

11. All Users Folder - (c:\windows\all users\start menu\programs\startup)

Shortcuts to any program will automatically start when placed here.


These are the shortcuts located in your All Users StartUp folder


*(No start-ups found)*

==========================================================================
__________________________________________________________________________

12. Miscellaneous StartUp Configurations

-============================-
Registry StartUp Directories
-============================-

Should show the Start Menu StartUp and All Users StartUp directories

.....................................................................

[1] HKCU - Shell Folders

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

"Startup"="C:\\WINDOWS\\Start Menu\\Programs\\StartUp"

.....................................................................

[2] HKCU - User Shell Folders

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders


.....................................................................

[3] HKLM - Shell Folders

HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\Shell Folders

"Common Startup"="C:\\WINDOWS\\All Users\\Start Menu\\Programs\\StartUp"

.....................................................................

[4] HKLM - User Shell Folders

HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\User Shell Folders


.....................................................................

-=======================-
Registry Shell Spawning
-=======================-

Open Commands for Executable File Types

@="\"%1\" %*"
(.exe file - RegPath = HKCR\exefile\shell\open\command)

@="\"%1\" %*"
(.com file - RegPath = HKCR\comfile\shell\open\command)

@="\"%1\" /S"
(.scr file - RegPath = HKCR\scrfile\shell\open\command)

@="\"%1\" %*"
(.bat file - RegPath = HKCR\batfile\shell\open\command)

@="\"%1\" %*"
(.pif file - RegPath = HKCR\piffile\shell\open\command)

@="C:\\WINDOWS\\SYSTEM\\MSHTA.EXE \"%1\" %*"
(.hta file - RegPath = HKCR\htafile\shell\open\command)

-=========================-
HKLM RunOnceEx - Registry
-=========================-


[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnceEx]


-=========================-
HKU (.Default) Run - Registry
-=========================-


[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Run]
"Mozilla Quick Launch"="\"C:\\Program Files\\Netscape\\Netscape\\Netscp.exe\" -turbo"


-==============================-
HKU (.Default) RunOnce - Registry
-==============================-


[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"ICQ"="C:\\PROGRAM FILES\\ICQ\\ICQ.EXE -trayboot"


-================================-
StubPaths - Registry (Partial Listing)
-================================-

(Please see the StubPath.txt on your desktop for complete listing)

HKLM\Software\Microsoft\Active Setup\Installed Components


"StubPath"="C:\\WINDOWS\\msnmgsr1.exe"
"StubPath"="C:\\WINDOWS\\COMMAND\\sulfnbk.exe /L"
"StubPath"=""
"StubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:OE /CALLER:IE50 /user /install"
"StubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:WAB /CALLER:IE50 /user /install"
"StubPath"="C:\\WINDOWS\\SYSTEM\\ie4uinit.exe"
"StubPath"="C:\\WINDOWS\\SYSTEM\\updcrl.exe -e -u C:\\WINDOWS\\SYSTEM\\verisignpub1.crl"

-=================-
WINSTART.BAT File - (c:\windows\winstart.bat)
-=================-

@C:\WINDOWS\tmpcpyis.bat

-=================-
WININIT.BAK File - (c:\windows\wininit.bak)
(name) (type) (size)(modified)(time)
wininit bak 56 01-16-03 10:09a
-=================-

[Rename]
NUL=C:\PROGRA~1\AMERIC~1.0\JITI\REAL9_~1.EXE
-=====================-
Screen Saver Settings (Possible system.ini start-up)
-=====================-

SCRNSAVE.EXE=C:\WINDOWS\SYSTEM\3DCHRI~1.SCR

==========================================================================
__________________________________________________________________________

- Supplemental Environment Information -

COMSPEC=C:\WINDOWS\COMMAND.COM
PATH=C:\WINDOWS;C:\WINDOWS\COMMAND
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
winbootdir=C:\WINDOWS
windir=C:\WINDOWS

File - c:\windows\Wininit.bak
File - c:\windows\deletefi.ini

==========================================================================
__________________________________________________________________________

- End -
the removal program was from spybot ? got it from a search the net

 

[IMM]

If it was me - I'd remove the Find Fast indexer
http://support.microsoft.com/default.aspx?scid=kb;en-us;158705
and uncheck the office startup item using msconfig (unless you use this computer almost exclusively for Office apps)

 

[yiksney]

was the comments /advice about run msconfig
for me yiksney to do ?
did the spybot work ?
i did run msconfig the other day in a trial and error saw ir somewhere it might be the answer so i tried it
so should i do the instructions for the msconfig ?

 

[yiksney]

and the file downloaded but when complete the OPEN WITH
box opened ......i have no idea what to do ? to run it ?

 

[Rollin' Rog]

Do a File Search for scanregw.exe

You should have a copy in c:\windows

If not you will have to extract it; I'll give you instructions for that later if necessary; right now I have to run.

If it IS there, then download the attached file to your desktop. Remember, right click and choose "save target as". Then, when it has been downloaded, Right click on it and rename it:

scanregw.reg



Note the extension is being changed from .txt to .reg

that is important. Once it has changed you should see a registry icon, then double click that and confirm the merge to the registry. You may need to reboot; then check msconfig > startups again and see if Scanregistry is there

 

[yiksney]

and is on the desktop
now reboot check msconfig
will advise yiksney