1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

[Resolved] Invalid Backweb App {Data Lifeguard}

Discussion in 'Earlier Versions of Windows' started by hamptondude, Jan 21, 2002.

Thread Status:
Not open for further replies.
Advertisement
  1. hamptondude

    hamptondude Thread Starter

    Joined:
    Jan 21, 2002
    Messages:
    8
    Every time computer starts (Windows ME) a message come up and says "INVALID BACKWEB APPLICATION ID 8263142". I've been every where trying to get rid of this - MOSAIC1 are you still there?....
     
  2. Mosaic1

    Mosaic1

    Joined:
    Aug 17, 2001
    Messages:
    7,486
    Yes. I just saw this. BackWeb is something which runs in the background and checks for updates to your computer. Do you have an HP? I do. I uninstalled Backweb.. I would advise you to go into MSCONFIG and uncheck Backweb. Reboot and see if that gets rid of the message for you. I never got any updates when I checked using Backweb. It's useless.
     
  3. hamptondude

    hamptondude Thread Starter

    Joined:
    Jan 21, 2002
    Messages:
    8
    Cannot find BACKWEB anywhere under MSCONFIG???

    By HP do you mean a Hewlett Packard Computer? (no)
     
  4. Mosaic1

    Mosaic1

    Joined:
    Aug 17, 2001
    Messages:
    7,486
  5. Mosaic1

    Mosaic1

    Joined:
    Aug 17, 2001
    Messages:
    7,486
    At any Rate, I think something is trying to get out onto the Internet at start. If you don't resolve this, Download Startup Log from this link.
    http://home.earthlink.net/~rmbox/Reticulated/Toys.html

    Run it. Copy and paste the results into a post here. Someone will have a look and see if they can pinpoint what's going on.
    It could be a warning from a firewall. It's late here and I am about to sign off. I'm sure others will be along to help you out.
    Good night,
    Mo
     
  6. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
  7. hamptondude

    hamptondude Thread Starter

    Joined:
    Jan 21, 2002
    Messages:
    8
    Comments:

    This is a log of all the programs on your computer that
    are starting automatically every time you start Windows.
    Using this log can be a quick way to spot trojans.

    StartUp Log (version 1.54) - Release Date 12/12/2001

    __________________________________________________________________________
    __________________________________________________________________________

    StartUp Log Index

    1. HKLM Run
    2. HKCU Run
    3. HKLM RunOnce
    4. HKCU RunOnce
    5. HKLM RunServices
    6. HKLM RunServicesOnce
    7. WIN.INI file
    8. SYSTEM.INI file
    9. AUTOEXEC.BAT file
    10. StartUp folder
    11. All Users StartUp
    12. Misc. StartUp Configurations

    __________________________________________________________________________
    __________________________________________________________________________

    The following is a list of your current Start-Ups
    __________________________________________________________________________
    __________________________________________________________________________

    1. HKLM Run - Registry

    [RegPath]
    "StartUp"


    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ScanRegistry"="C:\\WINDOWS\\scanregw.exe /autorun"
    "TaskMonitor"="C:\\WINDOWS\\taskmon.exe"
    "PCHealth"="C:\\WINDOWS\\PCHealth\\Support\\PCHSchd.exe -s"
    "SystemTray"="SysTray.Exe"
    "Norton eMail Protect"="C:\\Program Files\\Norton AntiVirus\\POPROXY.EXE"
    "SaveNow"="C:\\PROGRA~1\\SAVENOW\\SaveNow.exe"
    "NPROTECT"="C:\\Program Files\\Norton Utilities\\NPROTECT.EXE"
    "LoadPowerProfile"="Rundll32.exe powrprof.dll,LoadCurrentPwrScheme"
    "Norton Auto-Protect"="C:\\PROGRA~1\\NORTON~1\\NAVAPW32.EXE /LOADQUIET"
    "IncrediMail"="C:\\PROGRA~1\\INCRED~1\\bin\\IncrediMail.exe /c"
    "BCMDMMSG"="BCMDMMSG.exe"
    "iamapp"="C:\\Program Files\\Norton Personal Firewall\\IAMAPP.EXE"
    "MSConfigReminder"="C:\\WINDOWS\\SYSTEM\\msconfig.exe /reminder"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
    "Installed"="1"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
    "NoChange"="1"
    "Installed"="1"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
    "Installed"="1"


    ==========================================================================
    __________________________________________________________________________

    2. HKCU Run - Registry

    [RegPath]
    "StartUp"


    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]


    ==========================================================================
    __________________________________________________________________________

    3. HKLM RunOnce - Registry

    [RegPath]
    "StartUp"


    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]


    ==========================================================================
    __________________________________________________________________________

    4. HKCU RunOnce - Registry

    [RegPath]
    "StartUp"


    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]


    ==========================================================================
    __________________________________________________________________________

    5. HKLM RunServices - Registry

    [RegPath]
    "StartUp"


    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
    "ScriptBlocking"="\"C:\\Program Files\\Common Files\\Symantec Shared\\Script Blocking\\SBServ.exe\" -reg"
    "LoadPowerProfile"="Rundll32.exe powrprof.dll,LoadCurrentPwrScheme"
    "NPROTECT"="C:\\Program Files\\Norton Utilities\\NPROTECT.EXE"
    "SchedulingAgent"="mstask.exe"
    "SSDPSRV"="C:\\WINDOWS\\SYSTEM\\ssdpsrv.exe"
    "*StateMgr"="C:\\WINDOWS\\System\\Restore\\StateMgr.exe"
    "Machine Debug Manager"="C:\\WINDOWS\\SYSTEM\\MDM.EXE"
    "nisserv"="C:\\Program Files\\Norton Personal Firewall\\NISSERV.EXE"


    ==========================================================================
    __________________________________________________________________________

    6. HKLM RunServicesOnce - Registry

    [RegPath]
    "StartUp"


    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce]


    ==========================================================================
    __________________________________________________________________________

    7. WIN.INI File - (c:\windows\win.ini)

    Your win.ini run/load lines should look like run= and load= exclusively.
    There should be nothing to the right of the equal signs.


    These are the run and load lines in your WIN.INI file

    Run=hpfsched

    load=
    AUTOUNLOAD=No

    ==========================================================================
    __________________________________________________________________________

    8. SYSTEM.INI File - (c:\windows\system.ini)

    Your system.ini shell line should look like shell=Explorer.exe exclusively.
    You should only see Explorer.exe following the equal sign.


    This is the shell line in your SYSTEM.INI file

    shell=Explorer.exe

    ==========================================================================
    __________________________________________________________________________

    9. AUTOEXEC.BAT File - (c:\autoexec.bat)

    (Some trojans have been known to start from this file)


    These are your program startups and set paths in your autoexec.bat file


    ==========================================================================
    __________________________________________________________________________

    10. StartUp Folder - (c:\windows\start menu\programs\startup)

    Shortcuts to any program will automatically start when placed here.


    These are the shortcuts located in your StartUp folder

    C:\WINDOWS\Start Menu\Programs\StartUp\America Online 7.0 Tray Icon.lnk
    C:\WINDOWS\Start Menu\Programs\StartUp\Event Reminder.lnk
    C:\WINDOWS\Start Menu\Programs\StartUp\Adobe Gamma Loader.exe.lnk
    C:\WINDOWS\Start Menu\Programs\StartUp\Encoder Agent.lnk

    ==========================================================================
    __________________________________________________________________________

    11. All Users Folder - (c:\windows\all users\start menu\programs\startup)

    Shortcuts to any program will automatically start when placed here.


    These are the shortcuts located in your All Users StartUp folder

    C:\WINDOWS\All Users\Start Menu\Programs\StartUp\Data LifeGuard.lnk

    ==========================================================================
    __________________________________________________________________________

    12. Miscellaneous StartUp Configurations

    -============================-
    Registry StartUp Directories
    -============================-

    Should show the Start Menu StartUp and All Users StartUp directories

    .....................................................................

    [1] HKCU - Shell Folders

    HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

    "Startup"="C:\\WINDOWS\\Start Menu\\Programs\\StartUp"

    .....................................................................

    [2] HKCU - User Shell Folders

    HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders


    .....................................................................

    [3] HKLM - Shell Folders

    HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\Shell Folders

    "Common Startup"="C:\\WINDOWS\\All Users\\Start Menu\\Programs\\StartUp"

    .....................................................................

    [4] HKLM - User Shell Folders

    HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\User Shell Folders


    .....................................................................

    -=======================-
    Registry Shell Spawning
    -=======================-

    Open Commands for Executable File Types

    @="\"%1\" %*"
    (.exe file - RegPath = HKCR\exefile\shell\open\command)

    @="\"%1\" %*"
    (.com file - RegPath = HKCR\comfile\shell\open\command)

    @="\"%1\" /S"
    (.scr file - RegPath = HKCR\scrfile\shell\open\command)

    @="\"%1\" %*"
    (.bat file - RegPath = HKCR\batfile\shell\open\command)

    @="\"%1\" %*"
    (.pif file - RegPath = HKCR\piffile\shell\open\command)

    @="C:\\WINDOWS\\SYSTEM\\MSHTA.EXE \"%1\" %*"
    (.hta file - RegPath = HKCR\htafile\shell\open\command)

    -=========================-
    HKLM RunOnceEx - Registry
    -=========================-


    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnceEx]


    -=========================-
    HKU (.Default) Run - Registry
    -=========================-


    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Run]


    -==============================-
    HKU (.Default) RunOnce - Registry
    -==============================-


    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\RunOnce]


    -================================-
    StubPaths - Registry (Partial Listing)
    -================================-

    (Please see the StubPath.txt on your desktop for complete listing)

    HKLM\Software\Microsoft\Active Setup\Installed Components


    "StubPath"="C:\\WINDOWS\\msnmgsr1.exe"
    "StubPath"="C:\\WINDOWS\\COMMAND\\sulfnbk.exe /L"
    "StubPath"=""
    "OldStubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:OE /CALLER:WIN9X /user /install"
    "RealStubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:OE /CALLER:IE50 /user /install"
    "OldRealStubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:OE /CALLER:IE50 /user /install"
    "OldStubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:WAB /CALLER:WIN9X /user /install"
    "RealStubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:WAB /CALLER:IE50 /user /install"
    "OldRealStubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:WAB /CALLER:IE50 /user /install"
    "StubPath"="C:\\WINDOWS\\SYSTEM\\updcrl.exe -e -u C:\\WINDOWS\\SYSTEM\\verisignpub1.crl"
    "StubPath"="C:\\WINDOWS\\SYSTEM\\ie4uinit.exe"

    -=================-
    WINSTART.BAT File - (c:\windows\winstart.bat)
    -=================-

    @C:\WINDOWS\tmpcpyis.bat
    -=====================-
    Screen Saver Settings (Possible system.ini start-up)
    -=====================-


    ==========================================================================
    __________________________________________________________________________

    - Supplemental Environment Information -

    EUDIR=C:\EUPHORIA
    PATH=C:\WINDOWS;C:\EUPHORIA\BIN;C:\WINDOWS\COMMAND;C:\PROGRA~1\SYMANTEC\PCANYW~1\;C:\BITWARE\
    COMSPEC=C:\WINDOWS\COMMAND.COM
    TEMP=C:\WINDOWS\TEMP
    TMP=C:\WINDOWS\TEMP
    winbootdir=C:\WINDOWS
    windir=C:\WINDOWS

    File - c:\WinBoot.ini
    File - c:\windows\deletefi.ini

    ===========
    {RR: I have edited out the Stubbpaths.txt file as it is not needed for review}
     
  8. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    Hamptondude, apart from the issue of BackWeb, you have SaveNow which is described thusly:

    http://support.microsoft.com/default.aspx?scid=kb;EN-US;q302463

    I would follow instructions to remove it from Add/Remove. Reboot afterwards. Look for BackWeb while you're there as well.
     
  9. hamptondude

    hamptondude Thread Starter

    Joined:
    Jan 21, 2002
    Messages:
    8
    Based on the information some of you generoulsy provided I tried removing something DATA LIFEGUARD IN MY STARTUP SECTION and that did the trick - the message no longer appear. I also deleted SAVENOW at first which did not help.

    I seen this error problem many places on the internet so it you hear of it again make a note of this fix - I have been trying for weeks to get rid of it.

    Thanks to all.
     
  10. Mosaic1

    Mosaic1

    Joined:
    Aug 17, 2001
    Messages:
    7,486
    http://www.lynnfarmerphoto.net/35MMBoard/messages/16936.html
    I never would have guessed. I did a search for Data Lifeguard Backweb and this came up.
    Glad you got that worked out.
     
  11. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/65665

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice