|
Posted by Scherbina Vladimir on July 5, 2006, 9:40 am
If you were Registered and logged in, you could reply and use other advanced thread options I suggest a rather interesting proposition to download autoruns from
sysinternals.com and check all software that runs when OS boots.
--
Vladimir
> Hi,
>
> When I start up Windows XP, folder 'C:\Windows\System32' always pops
> up. I following the suggestions from some articles, and created the
> following message. Could anyone suggestion how should I proceed? Thank
> you very much!
>
>
> Key Name:
> HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
> Class Name: <NO CLASS>
> Last Write Time: 7/5/2006 - 8:32 AM
> Value 0
> Name: MSMSGS
> Type: REG_SZ
> Data: "C:\Program Files\Messenger\msmsgs.exe" /background
>
> Value 1
> Name: ctfmon.exe
> Type: REG_SZ
> Data: C:\WINDOWS\system32\ctfmon.exe
>
>
> Key Name:
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
> Class Name: <NO CLASS>
> Last Write Time: 7/4/2006 - 11:21 PM
> Value 0
> Name: ATIModeChange
> Type: REG_SZ
> Data: Ati2mdxx.exe
>
> Value 1
> Name: SynTPLpr
> Type: REG_SZ
> Data: C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
>
> Value 2
> Name: SynTPEnh
> Type: REG_SZ
> Data: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
>
> Value 3
> Name: QCTRAY
> Type: REG_SZ
> Data: C:\Program
> Files\ThinkPad\ConnectUtilities\QCTRAY.EXE
>
> Value 4
> Name: QCWLICON
> Type: REG_SZ
> Data: C:\Program
> Files\ThinkPad\ConnectUtilities\QCWLICON.EXE
>
> Value 5
> Name: BMMGAG
> Type: REG_SZ
> Data: RunDll32
> C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll,StartPwrMonitor
>
> Value 6
> Name: TPTRAY
> Type: REG_SZ
> Data: C:\PROGRA~1\ThinkPad\UTILIT~1\TP98TRAY.EXE
>
> Value 7
> Name: TP4EX
> Type: REG_SZ
> Data: tp4ex.exe
>
> Value 8
> Name: TPHOTKEY
> Type: REG_SZ
> Data: C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
>
> Value 9
> Name: NPDTray
> Type: REG_SZ
> Data: C:\PROGRA~1\ThinkPad\UTILIT~1\NPDTray.exe
>
> Value 10
> Name: AGRSMMSG
> Type: REG_SZ
> Data: AGRSMMSG.exe
>
> Value 11
> Name: UC_SMB
> Type: REG_SZ
> Data:
>
> Value 12
> Name: Tgcmd
> Type: REG_SZ
> Data: "C:\Program Files\Support.com\bin\tgcmd.exe /server"
>
> Value 13
> Name: OfficeScanNT Monitor
> Type: REG_SZ
> Data: -HideWindow
>
> Value 14
> Name: SunJavaUpdateSched
> Type: REG_SZ
> Data: C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
>
> Value 15
> Name: AVG7_CC
> Type: REG_SZ
> Data: C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
>
>
> Key Name:
>
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents
> Class Name: <NO CLASS>
> Last Write Time: 7/2/2006 - 8:20 PM
>
> Key Name:
>
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL
> Class Name: <NO CLASS>
> Last Write Time: 7/2/2006 - 8:20 PM
> Value 0
> Name: Installed
> Type: REG_SZ
> Data: 1
>
>
> Key Name:
>
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI
> Class Name: <NO CLASS>
> Last Write Time: 7/2/2006 - 8:20 PM
> Value 0
> Name: Installed
> Type: REG_SZ
> Data: 1
>
> Value 1
> Name: NoChange
> Type: REG_SZ
> Data: 1
>
>
> Key Name:
>
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS
> Class Name: <NO CLASS>
> Last Write Time: 7/2/2006 - 8:20 PM
> Value 0
> Name: Installed
> Type: REG_SZ
> Data: 1
>
|