From:  mac
|
On: 2007/02/20 05:09:21
|
i can't get rid of RealPlayer and MSN Messenger from this workstation.
i delete the shortcuts from 2 places in the registry:
HKLM/Software/Microsoft/Windows/CurrentVersion/Run
and
HKCU/Software/Microsoft/Windows/CurrentVersion/Run
and then i make sure that there is no shortcut in
START/Programs/Startup
then i reboot the machine, and they're not running, but after a few days the shortcuts are back in
HKLM/Software/Microsoft/Windows/CurrentVersion/Run <-- msn
and
HKCU/Software/Microsoft/Windows/CurrentVersion/Run. <-- real
i'm not doing anything that would re-execute the programs, nor doing much on the internet (other than hotmail, which MIGHT reinitialize messenger, but it doesn't on my home pc, so i don't see how it would on this workstation) and nothing that involves realplayer (i don't have speakers so i don't do any music sites)
I did the same thing for a friend's home pc, and when he rebooted and went online (has broadband, so it happens together), he got a message that there was an error in his messenger and to wait while that got fixed, and sure enough, the shortcut is back in
HKCU/Software/Microsoft/Windows/CurrentVersion/Run
uninstalling RealPlayer seems to perminantly eliminate it, but that doesn't answer the burning question;
what am i missing? i'm not executing anything remotely like RealPlayer, yet it seems to get its shortcut back into
HKLM/Software/Microsoft/Windows/CurrentVersion/Run
is there a 4th Startup in windows 2000?
where are they hiding their "shortcut installer"?
|
|
|
From: stone5150
|
On: 2007/02/20 05:56:21
|
|
I use RealPlayer Alternative http://www.afte...and_filters/real_alternative.cfm
|
|
|
From: muso
|
On: 2007/02/20 06:06:15
|
I'd recommend that too, along with QuickTime alternative.
Real Player, especially, is so much like a virus IMO.
|
|
|
From: stone5150
|
On: 2007/02/20 06:32:50
|
|
RealPlayer Basic behaves exactly like a virus.
|
|
|
From: PaulHews
|
On: 2007/02/20 07:10:36
|
Messenger starts up with Outlook/Outlook Express as well as when you run sites like Hotmail. It has options to start with Windows or whenever you're connected to the Internet, and if you disable those, it should not reappear in those run keys. However, MS makes it hard for you to not use Messenger by loading it all those other times. If you don't want it to start up, you can rename the folder that contains it. Then use Trillian instead, which will load only when you tell it to.
I'd guess that Real Player has a IE plugin that loads with IE, then that probably throws that crap back into your registry. (not having/wanting Real installed, can't check.) Just get rid of that junk.
|
|
|
From: Huntress
|
On: 2007/02/20 18:59:19
|
|
Instead of just deleting the entry you should only "comment" the entry out by placing a ";" (semicolon) in front of the data. This deactivates it but leaves it for the app to "see" when it looks in the registry for it.
|
|
|
From: mac
|
On: 2007/02/20 19:49:30
|
|
wooohooooooooo! sandi nozz everything!!!!!!!!!
|
|
|
From: mac
|
On: 2007/02/20 19:57:21
|
|
Paul, i see the General Option to "Automatically run Messenger when I log into Windows", and have unchecked it. it seems like that would put the registry entry in, so i'm hoping that'll prevent it. but it seems like Mesenger wasn't running when i deleted the registry key last time, and Messenger wouldn't have had the opportunity to have put it back again. time will tell, 'cause i'm turning this thing off 'til tomorrow. thanks! i still don't see where's the 4th startup, but the word "bundled" probably answers that.
|
|
|
From: stone5150
|
On: 2007/02/20 20:01:33
|
|
Try running HijackThis and posting what it brings up.
|
|
|
From: mac
|
On: 2007/02/20 20:21:19
|
naaa, that pollutes Google. whenever i search for a full-file-name entry that i'm researching (from my Resistry's "Run"), all i get are posts of HijackThis. and what i'm looking for is buried in 80 lines of gobble-di-gook.
i don't think it's something that 'shouldn't be running', i think it's a service in Windows 2000 (yea, i know) that is supposed to be doing other things, but it's also running all these M$ sponsored TSRs.
i was just wondering if there was a static, well known (by everyone but me) place that executes things, like the "Run" and Startup.
|
|
|
From: Huntress
|
On: 2007/02/21 03:04:33
|
>>wooohooooooooo! sandi nozz everything!!!!!!!!!
Funny, that's what my boss said but I thought he was calling me a fucking know-it-all. ![[wink]](http://www.carobit.com/Forum/images/sm/wink.jpg)
|
|
|
From: muso
|
On: 2007/02/21 05:24:55
|
That's my girl 
|
|
|
From: mac
|
On: 2007/02/21 13:07:44
|
i used to know everything, and then i got married.... oops, sorry muso. don't want to spoil the surprise for ya :)
|
|
|
From: stone5150
|
On: 2007/02/21 13:33:32
|
|
I used to think I was a nice guy and pretty smart, then I got married and started working in IT.
|
|
|
From: Huntress
|
On: 2007/02/21 16:09:41
|
|
|
|
From: mac
|
On: 2007/02/21 23:01:11
|
|
luvya sandi!
|
|
|
From: Rem
|
On: 2007/02/22 02:37:46
|
Hi,
Sounds like you really want to know all the stuff Windows does ...
Here is a list off registry keys handled on startup. Most of it makes sense though.
btw BS player handles realplayer stuff very nicely and it's free.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
HKLM\SOFTWARE\Classes\Protocols\Filter
HKLM\SOFTWARE\Classes\Protocols\Handler
HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
HKLM\Software\Classes\Folder\Shellex\ColumnHandlers
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
HKCU\Software\Microsoft\Internet Explorer\UrlSearchHooks
HKLM\System\CurrentControlSet\Services
HKLM\System\CurrentControlSet\Control\Session Manager\BootExecute
HKLM\System\CurrentControlSet\Control\Session Manager\KnownDlls
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UIHost
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9
HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors
HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Authentication Packages
HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Notification Packages
HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Security Packages
Bye
\\\|///
\\ - - //
( @ @ )
-------------oOOo-(_)-oOOo-------------
(¯`·.¸¸.·´¯`·.¸¸.-> Rem <-.¸¸.·´¯`·.¸¸.·´¯)
|
|
|
From: stone5150
|
On: 2007/02/22 05:30:20
|
|
You'll want to look at all the BHOs that start.
|
|
|
From: mac
|
On: 2007/02/22 08:50:33
|
hiya Rem,
longtime!
i just wondered if there is a 4th Startup (like the registry "Run" keys).
i think the answer is No. i think stone's got the answer - they're hooked into running when explorer opens.
cool doodles!
|
|
|
From: Baldrick
|
On: 2007/02/22 09:36:42
|
FWIW, I find "Crap Cleaner" (I kid you not) to be an indispensable tool for removing unwanted startup crap, unused registry crap, orphaned DLL crap and just about any other crap that infests your system with its utter crapness. Free of spyware and other, uh, crap.
-> http://www.ccleaner.com/
HTH
|
|
|
From: Huntress
|
On: 2007/02/22 17:05:28
|
|
I'll second the CrapCleaner app. I've been using it for about a yeat now and I swear by it. Great little, non-invasive, easy to use, FREE program.
|
|
