Won't go into Stand-By
When I attempt to put my laptop into standby I receive an error : Compaq Easy Access Internet Keyboard active and preventing standby mode,
This is a new prob, how can I fix it? IS this related to Bttnserv.exe that I see in the task manger?
Thanks Rstark3
This is a new prob, how can I fix it? IS this related to Bttnserv.exe that I see in the task manger?
Thanks Rstark3
0
Comments
BTTNSRV.EXE is just the program that monitors the keyboard input for the hotkey buttons on your keyboard. It should be safe.
I'd like to see a Hijack This log of your system to see what else is running in the background.
Dexter...
here is Hijack info:
Logfile of HijackThis v1.97.7
Scan saved at 9:31:41 PM, on 4/16/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Compaq\Easy Access Button Support\StartEAK.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\Logitech\QCDriver\LVCOMS.EXE
C:\Program Files\Compaq\Easy Access Button Support\CPQEADM.EXE
C:\COMPAQ\CPQINET\CPQInet.exe
C:\Compaq\EAKDRV\EAUSBKBD.EXE
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\D-Tools\daemon.exe
C:\WINDOWS\System32\hphmon04.exe
C:\PROGRA~1\Compaq\EASYAC~1\BttnServ.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\Palm\HOTSYNC.EXE
C:\Program Files\Linksys\WPC11 Config Utility\WPC11Cfg.exe
C:\Program Files\Venturi182\venturi.exe
C:\Program Files\Venturi182\jre\bin\jrew.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Richard Stark\Desktop\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://store.presario.net/scripts/redirectors/presario/storeredir2.dll?s=searchfavweb&c=3c01&lc=0409
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Compaq
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: (no name) - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: (no name) - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - (no file)
O4 - HKLM\..\Run: [CPQEASYACC] C:\Program Files\Compaq\Easy Access Button Support\StartEAK.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [FastCache] C:\Program Files\AnalogX\FastCache\fc.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Common Files\Logitech\QCDriver\LVCOMS.EXE
O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
O4 - HKLM\..\Run: [WebInstall2] C:\DOCUME~1\RICHAR~1\LOCALS~1\Temp\insE.tmp /R /A
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [HPHmon04] C:\WINDOWS\System32\hphmon04.exe
O4 - HKLM\..\Run: [HPHUPD04] "C:\Program Files\HP Photosmart 11\hphinstall\UniPatch\hphupd04.exe"
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [mmtask] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
O4 - HKLM\..\Run: [ISLP2STA.EXE] ISLP2STA.EXE START
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HotSync Manager.lnk = C:\Palm\HOTSYNC.EXE
O4 - Global Startup: Instant Wireless Configuration Utility.lnk = C:\Program Files\Linksys\WPC11 Config Utility\WPC11Cfg.exe
O4 - Global Startup: Venturi.lnk = C:\Program Files\Venturi182\venturi.exe
O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000
O9 - Extra button: ICQ (HKLM)
O9 - Extra 'Tools' menuitem: ICQ (HKLM)
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O9 - Extra button: Support (HKCU)
O10 - Broken Internet access because of LSP provider 'vlsp.dll' missing
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O14 - IERESET.INF: START_PAGE_URL=http://store.presario.net/scripts/redirectors/presario/storeredir2.dll?s=consumerfav&c=3c01&lc=0409
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20011217/qtinstall.info.apple.com/qt505/us/win/QuickTimeInstaller.exe
O16 - DPF: {50F65670-1729-11D2-A51F-0020AFE5D502} (ForumChat) - http://objects.compuserve.com/chat/RTCChat.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/2203acc8adb989794322/netzip/RdxIE601.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37608.9459606481
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 127.0.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 127.0.0.1
O2 - BHO: (no name) - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - (no file)
O4 - HKLM\..\Run: [mmtask] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm
Those last 2 are associated with a program called Download Accelerator. This program contains adware, and really does not accelerate your downloads in any way. I recommend you delete those entries, and also uninstall Download Accelerator.
Try that and see if your stand-by mode works.
Also, feel free to get rid of these 2 items:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://store.presario.net/scripts/redirectors/presario/storeredir2.dll?s=searchfavweb&c=3c01&lc=0409
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Compaq
They are not necessary, just a little hijack and advertising by the laptop manufacturer.
Dexter...
You have some scummy thing that I've seen a lot of recently, but have yet to discover the name of it. The telltale thing is that "About:Blank" dealie.
Get rid of the following:
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about_:blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: (no name) - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - (no file)
O3 - Toolbar: (no name) - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - (no file)
O4 - HKLM\..\Run: [WebInstall2] C:\DOCUME~1\RICHAR~1\LOCALS~1\Temp\insE.tmp /R /A
O4 - HKLM\..\Run: [ISLP2STA.EXE] ISLP2STA.EXE START
O4 - Global Startup: Venturi.lnk = C:\Program Files\Venturi182\venturi.exe
O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm
O10 - Broken Internet access because of LSP provider 'vlsp.dll' missing
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52...meInstaller.exe
O16 - DPF: {50F65670-1729-11D2-A51F-0020AFE5D502} (ForumChat) - http://objects.compuserve.com/chat/RTCChat.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/2203acc...ip/RdxIE601.cab
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 127.0.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 127.0.0.1
Thanks
-Go to the Device Manager (Right click my computer, properties, hardware, device manager)
-From the Device Driver View menu, choose Show hidden devices.
-Click the plus sign (+) next to Non-Plug and Play Drivers to expand the listing, and then locate the Mrtrate driver.
-Right-click Mrtrate, and then select Properties.
-Click the Driver tab, and then click Stop under Current Status.
-Under Startup, in the Type box, click to select Disabled, and then click OK.
-Close the Device Manager window.
If THAT doesn't fix it, do this:
Go to Add/Remove programs and remove the "Adobe Type Manager." If that doesn't resolve the issue then do a search and delete these two files:
Pgpmemlock.sys and Pgpdisk.sys then reboot the computer. Your issue should be fixed.
Let us know how it goes.
Ummm, MRTRATE.dll is a Quicken file:
http://www.liutilities.com/products/wintaskspro/dlllibrary/mrtrate/
This user does not seem to have any Quicken products in their startup, so I don't think it is applicable. I suspect you were referencing this Microsoft Knowledge Base article? http://support.microsoft.com/default.aspx?scid=kb;en-us;810905
The second fix you mentioned assumes that Adobe Type Manager is installed, and I think the fix you are recommending comes from this MS KB article: http://support.microsoft.com/default.aspx?scid=kb;EN-US;257199
However, that article does not list Windows XP as an OS this is applicable to. This user is using XP SP1 as indicated in their HJT log. Can you provide a reference to your fix and XP?
Lastly, deleting any .sys files is a LAST RESORT. If you are going to advocate deleting any system files, please provide a credible reference for that fix.
No offense, but you are brand new here, so we would like to see some credible references for fixes before we let a post stand that tells users to delete system files
Dexter...
I understand your apprehension that I'm new, I'm simply trying to provide any help that I can.
Oh, and you can call me Morph, the rest of it is merely technicality.
One more thing, the first article you have from Microsoft is the article I was referring to.
Morph,
not apprehension, just protecting the site's reputation, you know
Do you have a reference for deleting the .SYS files? I couldn't find that on the MSKB article concering the ATM problem.
Welcome to Short-Media, by the way. You've come to a great site
Dexter...
http://support.microsoft.com/default.aspx?scid=kb;EN-US;257199
OK, advice verified
Dexter...
Rstark3
Morph, you gave us an almost ideal testing-first-then-removing procedure for files which might be criticals. The only thing I would add is a wait time to allow broken deps to evidence themselves-- if you do not know for sure what to do at a pinpoint level, which in this case you obviously did.
First disable service, and lif really wanting to be careful, look at the dependencies pane in advanced prt of the properties dialog. If notihing bad happens over 8-12 hours of a box-exercised run of critical things, then delete that service's underlying things, in this case files of type sys.
Same rule for sensitive type things tied to apps, in this case virtualized system functions registered as pure system type functions.
If no substantiable link, be careful, and the process will tell you what is up before you kill completely with a too-invasive O\S underlayment surgery. Dex has a good point, follow good knowledge already doumneted first. Sometimes, you get to be a pioneer or cannot find the tidbit you want, though, and this process will help a lot then.
One other resource for this kind of thing, if one is good and has an under-the-hood level understanding of interemediate or better O\S level rule sets, is TechRepublic's forums and articles and tips things. Most of the folks there are admin-grade folks, many are MSCE or better grade techs. They proved so good independently, that CNET acquired them since they needed support infrastructure funding and kept the best of the best still running the areas that Techrepublic covers right in place, and instead of absorbing them kept TechRepublic intact as to name and structure.
John D.
Or something like that.
Basicly, if you want to experimentally remove something you think is bad, you need to have a way to undo it.
With XP, you can back up the system state first, then remove just what you are not sure of. Then you can restore the system state and get your registry back if it breaks things.
HJT also has this facility, by backing up things or quarantining them. You can get HJT to unquarantine, and what it backs up are files of type .reg when you tell it to backup and you have deleted registry entries. HJT will literally play back the .reg files for the entires you tell it to restore and put them back. Pull registry entries FIRST, then test, then restart, then delete the files you have noted down. If you want to "play" seriously, print out what you get as a log, and mark what you remove as to registry entries so you know what files to later delete.
Third, regedt32 is a tool available from within an XP install, run from start|run|regedt32. IT has a registry backup also.
When you have a backup, you can experimentally do anything almost, and the trick is to run things before rebooting\restarting (in XP) and if the things you need still work without the entry, then you can reboot\restart XP.
Backup so you have an undo, delete what you really question, test and make sure things work, then restart to make sure changes got committed.
This is how historically you can actually really remove things.
If you are really not sure, in 98 and Me and XP (not 2000 unless you have that tool seperately), you can Start|run|msconfig and keep things from starting as far as apps and some system processes. BUT, what msconfig does is to not mark the registry itself-- it disables startup by moving things to the Disabled Startup ... Directory. If you then get windows unable to do something you can rerun msconfig, check what you unchecked to get it not to be loaded, and restart Windows again and then get the thing you disabled restarted.
OTOH, if things now work right, you can use the registry editor after writing down the name of the unchecked thing, and delete entries containing that name and restart to commit the registry.
For newer folks, the rule is "ask first" but for very advanced users, they can follow this process. Advanced users know to always back up first, and to make dang sure the thing you are working on is backed up if it is the registry. 98 and onward had tools for this that could be done from the command line (DOS mode). 98 even had a command line registry restorer, named scanreg (not the Windows one, it was a command line version that had simpler options like /restore and /backup and /opt (this last forced a registry cleaning of empty reg keys, and result was a smaller and more effective registry although scanreg /opt only went back to the dos mode prompt when done and did not tell you it was finished).
Most things with tray in thier names can be disabled this way, you will lose the icon in your system tray next to clock doing so, but can use the program itself just fine about 90% of the time. I have killed the Symantec tray this way and NAV still runs, on very limited resource boxes, but I tend to put it back on as it has a quick way to disable Cleansweep and NAV to run installers that cleansweep "walks on" and is incompatible with or NAV false hits on or interrupts and casues install failures by interrupting the install for too long.
The other thing with "being sure" is to find two or more fairly reputable sources that document the same thing before skipping the backup step.
Those of us who give this kind of peremptory "remove this" advice tend to have 2-4 same things doced and know the sources are decent at minimum before saying to do it.
This is the intro to REGISTRY 101. Now you know why folks say backitup when they are talking about registry playing.