Windows explorer always opens at boot up, why?

edited May 2004 in Science & Tech
I just installed WinXP and now a Windows Explorer keeps opening when i boot up the system. I have not left any windows explorers open when I shut down. I have the defaults set in the Tools>Folder Options>View. I have checked for viruses and adwares.

Is there a setting file that I can edit to make this window to stop popping up?

Thanks!
Dean

Comments

  • primesuspectprimesuspect Beepin n' Boopin Detroit, MI Icrontian
    edited May 2004
    Post a HijackThis log here and we can figure it out. It's probably something in the startup script that's broken.
  • edited May 2004
    Thanks dood,

    Here is the log:

    Logfile of HijackThis v1.97.7
    Scan saved at 7:28:51 PM, on 5/4/2004
    Platform: Windows XP (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 (6.00.2600.0000)

    Running processes:
    C:\WINXP\System32\smss.exe
    C:\WINXP\system32\winlogon.exe
    C:\WINXP\system32\services.exe
    C:\WINXP\system32\lsass.exe
    C:\WINXP\system32\svchost.exe
    C:\WINXP\System32\svchost.exe
    C:\WINXP\Explorer.EXE
    C:\Documents and Settings\Dean.DNO-8TMHIOS2TOA\Desktop\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://tvlistings2.zap2it.com/grid.asp?partner_id=national
    R3 - Default URLSearchHook is missing
    O2 - BHO: (no name) - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - C:\Program Files\DAP\DAPBHO.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINXP\System32\msdxm.ocx
    O4 - HKLM\..\Run: [Ptipbmf] rundll32.exe ptipbmf.dll,SetWriteCacheMode
    O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
    O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
    O4 - HKLM\..\Run: [PRONoMgr.exe] C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINXP\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [InstantAccess] C:\Program Files\ScannerU\TBRIDGE\BIN\InstantAccess.exe /h
    O4 - HKLM\..\Run: [RegisterDropHandler] C:\Program Files\ScannerU\TBRIDGE\BIN\RegisterDropHandler.exe
    O4 - HKLM\..\Run: [LWBMOUSE] C:\Program Files\ Mouse\ Mouse\5.1\lwbwheel.exe
    O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
    O4 - HKLM\..\Run: [NeroCheck] C:\WINXP\System32\\NeroCheck.exe
    O4 - HKLM\..\Run: [PrinTray] C:\WINXP\System32\spool\DRIVERS\W32X86\2\printray.exe
    O4 - HKLM\..\Run: [LXSUPMON] C:\WINXP\System32\LXSUPMON.EXE RUN
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINXP\System32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\RunServices: [RegisterDropHandler] C:\Program Files\ScannerU\TBRIDGE\BIN\RegisterDropHandler.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - Global Startup: GStartup.lnk = C:\Program Files\Common Files\GMT\GMT.exe
    O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm
    O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm
    O9 - Extra button: Run DAP (HKLM)
    O9 - Extra button: Messenger (HKLM)
    O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
    O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB
    O16 - DPF: {4D7F48C0-CB49-4EA6-97D4-04F4EACC2F3B} (InstallShield Setup Player 2K2) - http://www.ipswitch.com/_installs/wsftp_le/setup.exe
    O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/303218b5d2ff49c4e420/netzip/RdxIE601.cab
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004033001/housecall.antivirus.com/housecall/xscan53.cab
    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38107.5111458333

    I'm thinking it has something to do with either the EXPLORER.EXE or one of the Program Files lines since it is the Program Files window that keeps opening.

    If you can tell me what's wrong I would love it.

    Dean
  • CBCB Ƹ̵̡Ӝ̵̨̄Ʒ Der Millionendorf- Icrontian
    edited May 2004
    dno_ca wrote:
    Thanks dood,
    O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm
    O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm
    O9 - Extra button: Run DAP (HKLM)
    O9 - Extra button: Messenger (HKLM)
    O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)


    do you know what this DAP prog is? is it an accelerator?
  • edited May 2004
    Yes it is a download accelrator....
  • EyesOnlyEyesOnly Sweden New
    edited May 2004
    Hmm i've been having this same problem. Here's my log.

    Logfile of HijackThis v1.97.7
    Scan saved at 07:30:30, on 2004-05-05
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Unable to get Internet Explorer version!

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program\Delade filer\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program\Microsoft Hardware\Mouse\point32.exe
    C:\Program\Delade filer\Symantec Shared\ccApp.exe
    C:\Program\FireDaemon\FireDaemon.exe
    C:\Program\Delade filer\Microsoft Shared\VS7Debug\mdm.exe
    C:\WINDOWS\System32\rmctrl.exe
    C:\Program\ZONELA~1\ZONEAL~1\zlclient.exe
    C:\framxpro\FreeRAM XP Pro 1.40.exe
    C:\Program\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
    C:\Program\Messenger\msmsgs.exe
    C:\Folding@home\FAH4Console.exe
    C:\Program\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
    C:\Program\JetToolBar\JetTB.exe
    C:\Folding@home\FahCore_65.exe
    C:\EMIII\EMIII.exe
    C:\Program\NORTON~2\SPEEDD~1\nopdb.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\ZoneLabs\vsmon.exe
    C:\Program\Kazaa Lite K++\KazaaLite.kpp
    C:\Program\Opera7\opera.exe
    C:\Apps\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:80
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program\SPYBOT~1\SDHelper.dll
    O2 - BHO: (no name) - {9527D42F-D666-11D3-B8DD-00600838CD5F} - C:\WINDOWS\System32\IETie.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [POINTER] C:\Program\Microsoft Hardware\Mouse\point32.exe
    O4 - HKLM\..\Run: [Openwares LiveUpdate] C:\Program Files\LiveUpdate\LiveUpdate.exe
    O4 - HKLM\..\Run: [RoxioEngineUtility] "C:\Program\Delade filer\Roxio Shared\System\EngUtil.exe"
    O4 - HKLM\..\Run: [ccApp] "C:\Program\Delade filer\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [ccRegVfy] "C:\Program\Delade filer\Symantec Shared\ccRegVfy.exe"
    O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program\Logitech\Video\ISStart.exe
    O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program\Logitech\Video\LogiTray.exe
    O4 - HKLM\..\Run: [RemoteControl] C:\WINDOWS\System32\rmctrl.exe
    O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program\Logitech\Video\ISStart.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\System32\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [Zone Labs Client] C:\Program\ZONELA~1\ZONEAL~1\zlclient.exe
    O4 - HKCU\..\Run: [FreeRAM XP] "C:\framxpro\FreeRAM XP Pro 1.40.exe" -win
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program\Messenger\msmsgs.exe" /background
    O4 - Startup: Electron Microscope.lnk = C:\EMIII\EMIII.exe
    O4 - User Startup: Electron Microscope.lnk = C:\EMIII\EMIII.exe
    O4 - Global Startup: jetToolBar.lnk = C:\Program\JetToolBar\JetTB.exe
    O8 - Extra context menu item: E&xportera till Microsoft Excel - res://C:\Program\MICROS~3\Office10\EXCEL.EXE/3000
    O9 - Extra 'Tools' menuitem: Sun Java-konsol (HKLM)
    O9 - Extra button: Run WinHTTrack (HKLM)
    O9 - Extra 'Tools' menuitem: Launch WinHTTrack (HKLM)
    O9 - Extra button: @C:\Program\Messenger\Msgslang.dll,-61144 (HKLM)
    O9 - Extra 'Tools' menuitem: @C:\Program\Messenger\Msgslang.dll,-61144 (HKLM)
    O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
    O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
    O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37724.2563425926
    O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
  • EnverexEnverex Worcester, UK Icrontian
    edited May 2004
    It's normally caused by RUN items that have spaces in the address and have not been put in speech marks.
  • edited May 2004
    Hey dood,

    I have fixed my windows explorer from starting at boot up.

    I did it by runiing MSCONFIG in the RUN window of WinXP. I just clicked on the START UP tab and had a look through there. I saw that I had two mouse drivers loading at start up so I disabled one of them. Rebooted and viola, no window. I did have another pop up asking if I wanted to restore my Start Up properties, but I said NO and Dont display message again. Rebooted and still fine.

    You look like you may have the same program loading twice. Not sure if that would cause this to happen.

    If anyone can tell me if my fix should work fine, can you please verify it? I do not want to fix the symptom and not the actual problem, such as now my WinXP will boot slower. I don't think it should because WinXP won't even look for that mouse program, right?

    Thanks!
  • EyesOnlyEyesOnly Sweden New
    edited May 2004
    This just happened to me again. I just installed windows yesterday on a whole new system yet it starts.
  • EyesOnlyEyesOnly Sweden New
    edited May 2004
    Just noticed the of the apps that launch at startup 2 of the paths have "" around them. Is this correct. Here's what the registry says.

    If that's not the cause what is. I've installed many apps today but fet that start with windows. How will i know which app is to blaim. Strangely this problem began today so whatever it is is was installed today not yesterday. Sadly that doesn't help. :rant::eek2::mean:
    run.jpg 45.6K
  • floppybootstompfloppybootstomp Greenwich New
    edited May 2004
    This is good

    It may help, it may not, a good proggie though. For XP, saves making all those fernicketty reg changes, disable pop up balloons, stop MSN starting on boot, and a whole lot more.
  • EyesOnlyEyesOnly Sweden New
    edited May 2004
    Hmm haven't heard much good about it but i'll try it anyway. If i don't know what a setting does i'll leave it alone. Otherwise lets hope i find something.

    Edit
    Nope that didn't work.
  • edited May 2004
    Heya,

    Try and run MSCONFIG (Click on the START menu and then select RUN. Type in MSCONFIG) and click on the Start Up tab. These are the programs that are initally run automaticaly.

    If there is any thing coded wrong (such as NO quotation marks or spaces in the link address) then this will cause windows explorer to pop up. Also, if a program is being loaded that does not exist or if it is being loaded twicec, this will also happen.

    If you're not sure, take a screen shot and post it here.

    Dean
  • EyesOnlyEyesOnly Sweden New
    edited May 2004
    dno_ca wrote:
    Heya,
    If you're not sure, take a screen shot and post it here.
    Dean

    Here you go.
  • edited May 2004
    First of all, make sure that the files that are listed in here actually exist at the exact locations that it is showing. If any of the files are not in the folder that it should be in, then you can uncheck that one and reboot. Click that you do not want to see the message at start up and see if it works.

    If you feel that they are all in the right spot, I would try unchecking each of the files, one at a time, and rebooting. You can always check them again to activate them. I would start off with the Mouse driver (point32) as this is what caused it for me. My next suggestion would be the jetToolBar, as this may have been deleted with an AdWare removal program.

    Cheers,
    Dean
  • EyesOnlyEyesOnly Sweden New
    edited May 2004
    umm jettoolbar is a toolbar :) and not spyware. I talked to my brother and he said that stuff that gets installed in program files can cause this. i looked and saw a folder called liveupdate which belong to startup mechanic, a program i use to see what starts up. Liveupdate is what it's name says. Checks for new versions over at openwares.org.

    I removed the folder then uninstalled the program. will reboot and see what happens.

    Edit
    It was that liveupdate thing that was causing it. It's removed now. Thnaks for the help. :) :Rocker: :celebrate
Sign In or Register to comment.