Forum Home
Press F1
 
Thread ID: 97513 2009-02-18 08:28:00 Error message pop-up after removing start-up programs Beemer (6956) Press F1
Post ID Timestamp Content User
749077 2009-03-05 21:09:00 So what does this popup message say??

Does it show the name of a file / a program?

If it does uninstall that program

Whatever it is, it may not be compatible with Vista, why its blocking it
Speedy Gonzales (78)
749078 2009-03-05 22:22:00 The programs require admin privilege, and vista is complaining about them-so:

blog.gerke-preussner.de
Blam (54)
749079 2009-03-06 01:46:00 All it says is something like "Windows has blocked some start up programs. For details of which programs and to enable them (or something), click here" but when I do, the box disappears and nothing else appears. If I right-click on the icon on my bottom task bar, I can choose exit and it disappears until I restart my computer.

I looked at that website and followed all the instructions down to the bit about browsing for the program and realised I didn't know what I was looking for.
Beemer (6956)
749080 2009-03-06 02:14:00 Post a HijackThis log and we'll see if we can kill it. Blam (54)
749081 2009-03-06 02:22:00 Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:56:55 a.m., on 13/02/2009
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16809)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\COMODO\SafeSurf\cssurf.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = go.microsoft.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.stuff.co.nz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = ie.redirect.hp.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = go.microsoft.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = go.microsoft.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = ie.redirect.hp.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O4 - HKLM\..\Run: [ avast! ] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [COMODO SafeSurf] "C:\Program Files\COMODO\SafeSurf\cssurf.exe" -s
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [MSConfig] "C:\Windows\system32\msconfig.exe" /auto
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'NETWORK SERVICE')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762# # (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\Windows\system32\brsvc01a.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - Unknown owner - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe

--
End of file - 4691 bytes
Beemer (6956)
749082 2009-03-06 02:31:00 Tick these then tick fix checked

Close browsers

Or use ccleaner / tools / startup. Highlight these then delete them

O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"

Whatever you've unticked in msconfig, delete them in tools / startup in ccleaner

Then the only program it can be is comodo Surf, firewall, or Avast

Go to C:\Program Files\COMODO\SafeSurf\cssurf.exe right mouse on cssurf.exe and run it as admin

Go to :\Program Files\COMODO\COMODO Internet Security\cfp.exe right mouse on cfp.exe and select run as admin

Do the same for Avast

Then reboot
Speedy Gonzales (78)
749083 2009-03-06 02:37:00 All it says is something like "Windows has blocked some start up programs Thats a feature of the security built into vista .

By default you can not uninstall Windows Defender, only disable it .

The message is NOT an infection, its just doing what its being told to do, disabling Via hijack this is pointless .

VERY simple way to stop the messages .

Click the start Orb, type in Security - Select the Security Center from the search results .

In the window, on the left, bottom list, select Change the way Security center alerts me, select bottom option - reboot - you now should get NO more messages . Screen shot of settings ( . imagef1 . net . nz/files/Security . jpg" target="_blank">www . imagef1 . net . nz)

WARNING: disabling this will stop ALL warning, including out of date updates etc .
wainuitech (129)
749084 2009-03-06 03:12:00 Right, have done as suggested - fixed the one checked item, downloaded ccleaner and deleted the ones that were unticked in msconfig - at least the ones I could see there, which wasn't very many - from memory only one or two. There are more, but I couldn't see the same names in msconfig. Will reboot now and let you know if the annoying message comes back.

Wainuitech, I did what you suggested (think I posted earlier in this thread about it) but it won't keep the option I tick.
Beemer (6956)
749085 2009-03-06 03:45:00 Nope, still getting the same message, and when I click on it to see what programs are blocked, the popup disappears and nothing else appears. When I click "run or show removed programs" I get another box (headed Windows Defender) that says "Application failed to initialise: 0x800106ba. A problem caused this program's service to stop. To start the service, restart your computer or search Help and Support for how to start a service manually."

If all else fails, would it slow my computer down much to enable these programs again to avoid this annoyance?
Beemer (6956)
749086 2009-03-06 03:57:00 Update it if its a beta (support.microsoft.com)

Its probably out of date

Even tho the above site doesnt say its for vista, its the same error
Speedy Gonzales (78)
1 2 3 4