Any BOOTLOG experts handy?? 3

[Sparktom]

Hi Gang -

My sister sent me her startup list - I'll attach it to the bottom of this post. This was started after finding out that she'd fallen for the "Java Debugger, Kill this File, Teddy Bear Icon HOAX" - the shame. She's 1000 miles away, but she's a Little Sis so I feel protective.

She has Win ME - runs on a HP 7845. I've already found firmware updates that should be of use. The thrill of walking her thru a BIOS Flash should be exquisite. Nothing like a little danger. Looks like ME needs a kick in the upgrade britches too.

I'm not 100% comfortable with everything in this bootlog - help is appreciated. I see a few things I know nothing about, but one thing is an old issue - stuff I associate with scanning. She has no scanner - but, has a digi camera. I suspect that the camera may use these libraries - just not sure. Uncertainty is a terrible thing, and I've never tooled around with digi cameras so I ask for input.

"Thank you" in advance for anyone that takes a look here, I realize that some hefty gurus lurk these threads and I do not mind taking a shortcut to elegant enlightment. I'll begin the searches however to see what I can find on my end. I'll admit freely off the bat, I just don't like this kind of bulk with startup but ... I may just be a launch bigot who should move to Montana and grumble with others that like a tight startup.

OH! OH! .. I feel a **DO YOU REMEMBER** moment coming along. A little distraction, first:

Think back. Raise your hand if you recall peaceably beginning a Win 95 install (1st release, methinks, those painfull giddy early days) - with CD, with good EULA and serial number. Then - the install kills the CD driver and it's not one of those supported on the accompanying floppy (dead as doornail!), the install is half done, the color drains from your face as you realize you've been SCROD! ... whew ... memories that make us wealthy. I beg your pardon, these things just bubble up.

Mucho respect! - Spark

Here's the boot lineup:

StartupList report, 3/26/2003, 1:08:59 PM
StartupList version: 1.52
Started from : C:\MY DOCUMENTS\MY DOWNLOADS\STARTUPLIST.EXE
Detected: Windows ME (Win9x 4.90.3000)
Detected: Internet Explorer v6.00 (6.00.2600.0000)
* Using default options
==================================================

Running processes:

C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMKEYBD.EXE
C:\WINDOWS\SYSTEM\HPSYSDRV.EXE
C:\PROGRAM FILES\MOTIVE\MOTMON.EXE
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\WORKS SHARED\WKUFIND.EXE
C:\WINDOWS\OPTIONS\CABS\LOGITECH\HP_FINDER.EXE
C:\PROGRAM FILES\ADAPTEC\DIRECTCD\DIRECTCD.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\MCAFEE.COM\AGENT\MCAGENT.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSHLD.EXE
C:\PROGRAM FILES\MSN\MSNIA\DSLMON.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\WINDOWS\RunDLL.exe
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSRTE.EXE
C:\PALM\HOTSYNC.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\KEYBDMGR.EXE
C:\PROGRAM FILES\NETROPA\ONSCREEN DISPLAY\OSD.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\MSN\MSNCOREFILES\MSN6.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMUSBKB2.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\BACKWEB\BACKWEB\PROGRAM\BACKWEB.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\MY DOCUMENTS\MY DOWNLOADS\STARTUPLIST.EXE

--------------------------------------------------

Listing of startup folders:

Shell folders Startup:
[C:\WINDOWS\Start Menu\Programs\StartUp]
Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
HotSync Manager.lnk = C:\Palm\HOTSYNC.EXE

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

ScanRegistry = C:\WINDOWS\scanregw.exe /autorun
TaskMonitor = C:\WINDOWS\taskmon.exe
PCHealth = C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
SystemTray = SysTray.Exe
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
Keyboard Manager = C:\Program Files\Netropa\One-touch Multimedia Keyboard\MMKeybd.exe
MMTray =
hpsysdrv = c:\windows\system\hpsysdrv.exe
Delay = C:\WINDOWS\delayrun.exe
MotiveMonitor = C:\Program Files\Motive\motmon.exe
WorksFUD = C:\Program Files\Microsoft Works\wkfud.exe
Microsoft Works Portfolio = C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
Microsoft Works Update Detection = C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
DJRegFix = regedit /s c:\hp\djregfix.reg
HPLogiFinder = \WINDOWS\OPTIONS\CABS\LOGITECH\HP_FINDER.EXE
HPDJ Taskbar Utility = C:\WINDOWS\SYSTEM\hpztsb02.exe
Adaptec DirectCD = C:\Program Files\ADAPTEC\DIRECTCD\DIRECTCD.EXE
LoadQM = loadqm.exe
MCAgentExe = C:\Program Files\McAfee.com\Agent\mcagent.exe
MCUpdateExe = C:\PROGRA~1\MCAFEE.COM\AGENT\MCUPDATE.EXE
VirusScan Online = "C:\PROGRA~1\MCAFEE.COM\VSO\mcvsshld.exe"
DSL Connection Tool = C:\Program Files\MSN\MSNIA\dslmon.exe
QuickTime Task = "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
SchedulingAgent = mstask.exe
SSDPSRV = C:\WINDOWS\SYSTEM\ssdpsrv.exe
*StateMgr = C:\WINDOWS\System\Restore\StateMgr.exe
StillImageMonitor = C:\WINDOWS\SYSTEM\STIMON.EXE

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

Taskbar Display Controls = RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY
MoneyAgent = "C:\Program Files\Microsoft Money\System\Money Express.exe"
msnmsgr = "C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE" /background

--------------------------------------------------

Load/Run keys from C:\WINDOWS\WIN.INI:

load=
run=hpfsched

--------------------------------------------------

C:\WINDOWS\WININIT.BAK listing:
(Created 21/2/2003, 12:11:52)

[Rename]
C:\WINDOWS\SYSTEM\MSI.DLL=C:\WINDOWS\SYSTEM\TBMB324.TMP

--------------------------------------------------

C:\AUTOEXEC.BAT listing:

SET windir=C:\WINDOWS
SET winbootdir=C:\WINDOWS
SET COMSPEC=C:\WINDOWS\COMMAND.COM
SET PATH=C:\WINDOWS;C:\WINDOWS\COMMAND
SET PROMPT=$p$g
SET TEMP=C:\WINDOWS\TEMP
SET TMP=C:\WINDOWS\TEMP

--------------------------------------------------

C:\WINDOWS\WINSTART.BAT listing:

C:\WINDOWS\tmpcpyis.bat

--------------------------------------------------


Enumerating Browser Helper Objects:

(no name) - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}

--------------------------------------------------

Enumerating Task Scheduler jobs:

Tune-up Application Start.job
PCHealth Scheduler for Data Collection.job
McAfee.com Update Check 02232003124818.job

--------------------------------------------------

Enumerating Download Program Files:

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH.OCX
CODEBASE =

http://download.macromedia.com/pub/...ash/swflash.cab

[Microsoft Office Tools on the Web Control]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\OUTC.DLL
CODEBASE =

http://dgl.microsoft.com/downloads/outc.cab

[McAfee.com Updater]
InProcServer32 = C:\WINDOWS\MCBIN\MGAVEXP.DLL
CODEBASE =

http://download.mcafee.com/molbin/c...can/mcasupd.cab

[McAfee.com Operating System Class]
InProcServer32 = C:\WINDOWS\SYSTEM\MCINSCTL.DLL
CODEBASE =

http://bin.mcafee.com/molbin/shared...55/mcinsctl.cab

[{41F17733-B041-4099-A042-B518BB6A408C}]
CODEBASE =

http://a1540.g.akamai.net/7/1540/52...meInstaller.exe

[MSN Photo Upload Tool]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\MSNPUPLD.DLL
CODEBASE =

http://photos.msn.com/r/neutral/con....cab?5,0,1730,0

[QuickTime Object]
InProcServer32 = C:\WINDOWS\SYSTEM\QTPLUGIN.OCX
CODEBASE =

http://www.apple.com/qtactivex/qtplugin.cab

--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

WebCheck: C:\WINDOWS\SYSTEM\WEBCHECK.DLL
UPnPMonitor: C:\WINDOWS\SYSTEM\UPNPUI.DLL
AUHook: C:\WINDOWS\SYSTEM\AUHOOK.DLL

--------------------------------------------------
End of report, 7,511 bytes
Report generated in 0.597 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

 

[edfair]

So, is she bigtime into Java debugging? If not, then don't waste time tying the problems together. It will lead you down a false path and waste time. Ed Fair
Any advice I give is my best judgement based on my interpretation of the facts you supply. Help increase my knowledge by providing some feedback, good or bad, on any advice I have given.

 

[Sparktom]

I should have explained, Ed, I'm not tying anything together. She will never miss the Java Debugger, but the fact that she was fooled into that concerns me with other bumps in the virtual road.

I've been at this for awhile, and managed to provide a rich home for a few rogue bits of code here too. To my shame, TGCMD (@home, Tioga, support.com) had a foothold on my end and busting into that hive was like lancing an infection. I don't want to miss anything - MOTIVE MONITOR, BACKWEB? I'm suspicious, and a big brother, this makes for a real busybody.

Thanks for your advice.

Spark

 

[Marcs41]

MotiveMonitor : Part of DELL’s Resolution Assistant which ships with most DELL PCs. MOTMON is however also found on Compaq and HP PCs. You can delete it.

BACKWEB : see

http://www.backweb.com/

most probably

http://www.backweb.com/products/html/backweb_foundation.html

run=hpfsched can be taken out, that's registration scheduler for HP

Aynthing ales that concerns you?
Performance wise, there is a need for a lot of cleaning!

[sub]If 'something' 'somewhere' gives 'some' error, excpect random guesses or no replies at all. Please specify details.
Free Tip: The F1 Key does NOT destroy your PC! - Marc[/sub]