comtekso
asked on
Folder view upon login
I have a few WinXP Pro and Win2k workstations that upon logging in will open up a folder view of C:\Program Files\Symantec I have looked in the startup setting but have not found where this is comming from. Any ideas on how track this down?
ASKER
OK below is the log. I quickly scanned it, but nothing jumped out at me. Maybe I just don't know what to look for. Hopefully you can see something. Thanks
-- Registry --
HKEY_LOCAL_MACHINE\Softwar e\Microsof t\Windows\ CurrentVer sion\RunOn ce
No Items Found
-- Registry --
HKEY_LOCAL_MACHINE\Softwar e\Microsof t\Windows\ CurrentVer sion\Run
Synchronization Manager mobsync.exe /logon
IgfxTray C:\WINNT\System32\igfxtray .exe
HotKeysCmds C:\WINNT\System32\hkcmd.ex e
vptray C:\Program Files\Symantec Client\vptray.exe
gcasServ "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
dla C:\WINNT\system32\dla\tfsw ctrl.exe
UpdateManager "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
-- Registry --
HKEY_CURRENT_USER\Software \Microsoft \Windows\C urrentVers ion\RunOnc e
No Items Found
-- Registry --
HKEY_CURRENT_USER\Software \Microsoft \Windows\C urrentVers ion\Run
No Items Found
-- Start Menu - Current User --
No Items Found
-- Start Menu - All Users --
No Items Found
-- Disabled Items --
hpoddt01.exe
-- Registry - Shell Value - HKLM\SOFTWARE\Microsoft\Wi ndows NT\CurrentVersion\Winlogon --
Explorer.exe
-- Running Processes --
System Idle Process
System
smss.exe \SystemRoot\System32\smss. exe
csrss.exe
winlogon.exe winlogon.exe
services.exe C:\WINNT\system32\services .exe
lsass.exe C:\WINNT\system32\lsass.ex e
svchost.exe C:\WINNT\system32\svchost -k rpcss
svchost.exe C:\WINNT\System32\svchost. exe -k netsvcs
svchost.exe
svchost.exe
LEXBCES.EXE C:\WINNT\system32\LEXBCES. EXE
spoolsv.exe C:\WINNT\system32\spoolsv. exe
cvpnd.exe "C:\Program Files\One-VA VPN Client\cvpnd.exe"
DefWatch.exe "C:\Program Files\Symantec Client\DefWatch.exe"
Rtvscan.exe "C:\Program Files\Symantec Client\Rtvscan.exe"
explorer.exe C:\WINNT\Explorer.EXE
hkcmd.exe "C:\WINNT\System32\hkcmd.e xe"
gcasServ.exe "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
tfswctrl.exe "C:\WINNT\system32\dla\tfs wctrl.exe"
LEXPPS.EXE "C:\WINNT\System32\lexpps. exe"
gcasDtServ.exe "C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe " -Embedding
wuauclt.exe "C:\WINNT\System32\wuauclt .exe"
StartupTracker3.exe "C:\Documents and Settings\triacm\Local Settings\Temp\Temporary Directory 1 for StartupTracker3.zip\Startu pTracker3. exe"
wmiprvse.exe
-- Running Services --
Name: AudioSrv
Description: Manages audio devices for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost. exe -k netsvcs
Name: BITS
Description: Uses idle network bandwidth to transfer data.
Startup Mode: Manual
Run from: C:\WINNT\System32\svchost. exe -k netsvcs
Name: Browser
Description: Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost. exe -k netsvcs
Name: CryptSvc
Description: Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\system32\svchost. exe -k netsvcs
Name: CVPND
Description:
Startup Mode: Auto
Run from: "C:\Program Files\One-VA VPN Client\cvpnd.exe"
Name: DefWatch
Description:
Startup Mode: Auto
Run from: C:\Program Files\Symantec Client\DefWatch.exe
Name: Dhcp
Description: Manages network configuration by registering and updating IP addresses and DNS names.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost. exe -k netsvcs
Name: dmserver
Description: Detects and monitors new hard disk drives and sends disk volume information to Logical Disk Manager Administrative Service for configuration. If this service is stopped, dynamic disk status and configuration information may become out of date. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost. exe -k netsvcs
Name: Dnscache
Description: Resolves and caches Domain Name System (DNS) names for this computer. If this service is stopped, this computer will not be able to resolve DNS names and locate Active Directory domain controllers. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost. exe -k NetworkService
Name: ERSvc
Description: Allows error reporting for services and applictions running in non-standard environments.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost. exe -k netsvcs
Name: Eventlog
Description: Enables event log messages issued by Windows-based programs and components to be viewed in Event Viewer. This service cannot be stopped.
Startup Mode: Auto
Run from: C:\WINNT\system32\services .exe
Name: EventSystem
Description: Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Manual
Run from: C:\WINNT\System32\svchost. exe -k netsvcs
Name: helpsvc
Description: Enables Help and Support Center to run on this computer. If this service is stopped, Help and Support Center will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost. exe -k netsvcs
Name: lanmanserver
Description: Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost. exe -k netsvcs
Name: lanmanworkstation
Description: Creates and maintains client network connections to remote servers. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost. exe -k netsvcs
Name: LexBceS
Description:
Startup Mode: Auto
Run from: C:\WINNT\system32\LEXBCES. EXE
Name: LmHosts
Description: Enables support for NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost. exe -k LocalService
Name: Netlogon
Description: Supports pass-through authentication of account logon events for computers in a domain.
Startup Mode: Auto
Run from: C:\WINNT\System32\lsass.ex e
Name: Netman
Description: Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections.
Startup Mode: Manual
Run from: C:\WINNT\System32\svchost. exe -k netsvcs
Name: Nla
Description: Collects and stores network configuration and location information, and notifies applications when this information changes.
Startup Mode: Manual
Run from: C:\WINNT\System32\svchost. exe -k netsvcs
Name: Norton AntiVirus Server
Description:
Startup Mode: Auto
Run from: C:\Program Files\Symantec Client\Rtvscan.exe
Name: NtmsSvc
Description: Manages removable media, drives, and libraries.
Startup Mode: Auto
Run from: C:\WINNT\system32\svchost. exe -k netsvcs
Name: PlugPlay
Description: Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability.
Startup Mode: Auto
Run from: C:\WINNT\system32\services .exe
Name: PolicyAgent
Description: Manages IP security policy and starts the ISAKMP/Oakley (IKE) and the IP security driver.
Startup Mode: Auto
Run from: C:\WINNT\System32\lsass.ex e
Name: ProtectedStorage
Description: Provides protected storage for sensitive data, such as private keys, to prevent access by unauthorized services, processes, or users.
Startup Mode: Auto
Run from: C:\WINNT\system32\lsass.ex e
Name: RemoteRegistry
Description: Enables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\system32\svchost. exe -k LocalService
Name: RpcSs
Description: Provides the endpoint mapper and other miscellaneous RPC services.
Startup Mode: Auto
Run from: C:\WINNT\system32\svchost -k rpcss
Name: SamSs
Description: Stores security information for local user accounts.
Startup Mode: Auto
Run from: C:\WINNT\system32\lsass.ex e
Name: Schedule
Description: Enables a user to configure and schedule automated tasks on this computer. If this service is stopped, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost. exe -k netsvcs
Name: seclogon
Description: Enables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost. exe -k netsvcs
Name: SENS
Description: Tracks system events such as Windows logon, network, and power events. Notifies COM+ Event System subscribers of these events.
Startup Mode: Auto
Run from: C:\WINNT\system32\svchost. exe -k netsvcs
Name: ShellHWDetection
Description:
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost. exe -k netsvcs
Name: Spooler
Description: Loads files to memory for later printing.
Startup Mode: Auto
Run from: C:\WINNT\system32\spoolsv. exe
Name: srservice
Description: Performs system restore functions. To stop service, turn off System Restore from the System Restore tab in My Computer->Properties
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost. exe -k netsvcs
Name: SSDPSRV
Description: Enables discovery of UPnP devices on your home network.
Startup Mode: Manual
Run from: C:\WINNT\System32\svchost. exe -k LocalService
Name: TermService
Description: Allows multiple users to be connected interactively to a machine as well as the display of desktops and applications to remote computers. The underpinning of Remote Desktop (including RD for Administrators), Fast User Switching, Remote Assistance, and Terminal Server.
Startup Mode: Manual
Run from: C:\WINNT\System32\svchost. exe -k netsvcs
Name: Themes
Description: Provides user experience theme management.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost. exe -k netsvcs
Name: TrkWks
Description: Maintains links between NTFS files within a computer or across computers in a network domain.
Startup Mode: Auto
Run from: C:\WINNT\system32\svchost. exe -k netsvcs
Name: uploadmgr
Description: Manages synchronous and asynchronous file transfers between clients and servers on the network. If this service is stopped, synchronous and asynchronous file transfers between clients and servers on the network will not occur. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost. exe -k netsvcs
Name: W32Time
Description: Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost. exe -k netsvcs
Name: WebClient
Description: Enables Windows-based programs to create, access, and modify Internet-based files. If this service is stopped, these functions will not be available. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost. exe -k LocalService
Name: winmgmt
Description: Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\system32\svchost. exe -k netsvcs
Name: WmdmPmSp
Description: Retrieves the serial number of any portable music player connected to your computer
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost. exe -k netsvcs
Name: wuauserv
Description: Enables the download and installation of critical Windows updates. If the service is disabled, the operating system can be manually updated at the Windows Update Web site.
Startup Mode: Auto
Run from: C:\WINNT\system32\svchost. exe -k netsvcs
-- Registry --
HKEY_LOCAL_MACHINE\Softwar
No Items Found
-- Registry --
HKEY_LOCAL_MACHINE\Softwar
Synchronization Manager mobsync.exe /logon
IgfxTray C:\WINNT\System32\igfxtray
HotKeysCmds C:\WINNT\System32\hkcmd.ex
vptray C:\Program Files\Symantec Client\vptray.exe
gcasServ "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
dla C:\WINNT\system32\dla\tfsw
UpdateManager "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
-- Registry --
HKEY_CURRENT_USER\Software
No Items Found
-- Registry --
HKEY_CURRENT_USER\Software
No Items Found
-- Start Menu - Current User --
No Items Found
-- Start Menu - All Users --
No Items Found
-- Disabled Items --
hpoddt01.exe
-- Registry - Shell Value - HKLM\SOFTWARE\Microsoft\Wi
Explorer.exe
-- Running Processes --
System Idle Process
System
smss.exe \SystemRoot\System32\smss.
csrss.exe
winlogon.exe winlogon.exe
services.exe C:\WINNT\system32\services
lsass.exe C:\WINNT\system32\lsass.ex
svchost.exe C:\WINNT\system32\svchost -k rpcss
svchost.exe C:\WINNT\System32\svchost.
svchost.exe
svchost.exe
LEXBCES.EXE C:\WINNT\system32\LEXBCES.
spoolsv.exe C:\WINNT\system32\spoolsv.
cvpnd.exe "C:\Program Files\One-VA VPN Client\cvpnd.exe"
DefWatch.exe "C:\Program Files\Symantec Client\DefWatch.exe"
Rtvscan.exe "C:\Program Files\Symantec Client\Rtvscan.exe"
explorer.exe C:\WINNT\Explorer.EXE
hkcmd.exe "C:\WINNT\System32\hkcmd.e
gcasServ.exe "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
tfswctrl.exe "C:\WINNT\system32\dla\tfs
LEXPPS.EXE "C:\WINNT\System32\lexpps.
gcasDtServ.exe "C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
wuauclt.exe "C:\WINNT\System32\wuauclt
StartupTracker3.exe "C:\Documents and Settings\triacm\Local Settings\Temp\Temporary Directory 1 for StartupTracker3.zip\Startu
wmiprvse.exe
-- Running Services --
Name: AudioSrv
Description: Manages audio devices for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost.
Name: BITS
Description: Uses idle network bandwidth to transfer data.
Startup Mode: Manual
Run from: C:\WINNT\System32\svchost.
Name: Browser
Description: Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost.
Name: CryptSvc
Description: Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\system32\svchost.
Name: CVPND
Description:
Startup Mode: Auto
Run from: "C:\Program Files\One-VA VPN Client\cvpnd.exe"
Name: DefWatch
Description:
Startup Mode: Auto
Run from: C:\Program Files\Symantec Client\DefWatch.exe
Name: Dhcp
Description: Manages network configuration by registering and updating IP addresses and DNS names.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost.
Name: dmserver
Description: Detects and monitors new hard disk drives and sends disk volume information to Logical Disk Manager Administrative Service for configuration. If this service is stopped, dynamic disk status and configuration information may become out of date. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost.
Name: Dnscache
Description: Resolves and caches Domain Name System (DNS) names for this computer. If this service is stopped, this computer will not be able to resolve DNS names and locate Active Directory domain controllers. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost.
Name: ERSvc
Description: Allows error reporting for services and applictions running in non-standard environments.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost.
Name: Eventlog
Description: Enables event log messages issued by Windows-based programs and components to be viewed in Event Viewer. This service cannot be stopped.
Startup Mode: Auto
Run from: C:\WINNT\system32\services
Name: EventSystem
Description: Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Manual
Run from: C:\WINNT\System32\svchost.
Name: helpsvc
Description: Enables Help and Support Center to run on this computer. If this service is stopped, Help and Support Center will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost.
Name: lanmanserver
Description: Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost.
Name: lanmanworkstation
Description: Creates and maintains client network connections to remote servers. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost.
Name: LexBceS
Description:
Startup Mode: Auto
Run from: C:\WINNT\system32\LEXBCES.
Name: LmHosts
Description: Enables support for NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost.
Name: Netlogon
Description: Supports pass-through authentication of account logon events for computers in a domain.
Startup Mode: Auto
Run from: C:\WINNT\System32\lsass.ex
Name: Netman
Description: Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections.
Startup Mode: Manual
Run from: C:\WINNT\System32\svchost.
Name: Nla
Description: Collects and stores network configuration and location information, and notifies applications when this information changes.
Startup Mode: Manual
Run from: C:\WINNT\System32\svchost.
Name: Norton AntiVirus Server
Description:
Startup Mode: Auto
Run from: C:\Program Files\Symantec Client\Rtvscan.exe
Name: NtmsSvc
Description: Manages removable media, drives, and libraries.
Startup Mode: Auto
Run from: C:\WINNT\system32\svchost.
Name: PlugPlay
Description: Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability.
Startup Mode: Auto
Run from: C:\WINNT\system32\services
Name: PolicyAgent
Description: Manages IP security policy and starts the ISAKMP/Oakley (IKE) and the IP security driver.
Startup Mode: Auto
Run from: C:\WINNT\System32\lsass.ex
Name: ProtectedStorage
Description: Provides protected storage for sensitive data, such as private keys, to prevent access by unauthorized services, processes, or users.
Startup Mode: Auto
Run from: C:\WINNT\system32\lsass.ex
Name: RemoteRegistry
Description: Enables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\system32\svchost.
Name: RpcSs
Description: Provides the endpoint mapper and other miscellaneous RPC services.
Startup Mode: Auto
Run from: C:\WINNT\system32\svchost -k rpcss
Name: SamSs
Description: Stores security information for local user accounts.
Startup Mode: Auto
Run from: C:\WINNT\system32\lsass.ex
Name: Schedule
Description: Enables a user to configure and schedule automated tasks on this computer. If this service is stopped, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost.
Name: seclogon
Description: Enables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost.
Name: SENS
Description: Tracks system events such as Windows logon, network, and power events. Notifies COM+ Event System subscribers of these events.
Startup Mode: Auto
Run from: C:\WINNT\system32\svchost.
Name: ShellHWDetection
Description:
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost.
Name: Spooler
Description: Loads files to memory for later printing.
Startup Mode: Auto
Run from: C:\WINNT\system32\spoolsv.
Name: srservice
Description: Performs system restore functions. To stop service, turn off System Restore from the System Restore tab in My Computer->Properties
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost.
Name: SSDPSRV
Description: Enables discovery of UPnP devices on your home network.
Startup Mode: Manual
Run from: C:\WINNT\System32\svchost.
Name: TermService
Description: Allows multiple users to be connected interactively to a machine as well as the display of desktops and applications to remote computers. The underpinning of Remote Desktop (including RD for Administrators), Fast User Switching, Remote Assistance, and Terminal Server.
Startup Mode: Manual
Run from: C:\WINNT\System32\svchost.
Name: Themes
Description: Provides user experience theme management.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost.
Name: TrkWks
Description: Maintains links between NTFS files within a computer or across computers in a network domain.
Startup Mode: Auto
Run from: C:\WINNT\system32\svchost.
Name: uploadmgr
Description: Manages synchronous and asynchronous file transfers between clients and servers on the network. If this service is stopped, synchronous and asynchronous file transfers between clients and servers on the network will not occur. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost.
Name: W32Time
Description: Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost.
Name: WebClient
Description: Enables Windows-based programs to create, access, and modify Internet-based files. If this service is stopped, these functions will not be available. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost.
Name: winmgmt
Description: Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINNT\system32\svchost.
Name: WmdmPmSp
Description: Retrieves the serial number of any portable music player connected to your computer
Startup Mode: Auto
Run from: C:\WINNT\System32\svchost.
Name: wuauserv
Description: Enables the download and installation of critical Windows updates. If the service is disabled, the operating system can be manually updated at the Windows Update Web site.
Startup Mode: Auto
Run from: C:\WINNT\system32\svchost.
See if disabling the vptray.exe entry helps
vptray C:\Program Files\Symantec Client\vptray.exe
One reference found here:
Symantec folder opens automatically after installing Symantec AntiVirus Corporate Edition 9.x and restarting:
http://service1.symantec.com/SUPPORT/ent-security.nsf/529c2f9adcf33a1088256e22005026f1/e6d358ea8614c7b388256ec50068a990?OpenDocument&src=bar_sch_nam
vptray C:\Program Files\Symantec Client\vptray.exe
One reference found here:
Symantec folder opens automatically after installing Symantec AntiVirus Corporate Edition 9.x and restarting:
http://service1.symantec.com/SUPPORT/ent-security.nsf/529c2f9adcf33a1088256e22005026f1/e6d358ea8614c7b388256ec50068a990?OpenDocument&src=bar_sch_nam
Umm, I see that it's already formatted in LFN.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
So, the solution is to open regedit.exe and navigate to:
HKEY_LOCAL_MACHINE\Softwar e\Microsof t\Windows\ CurrentVer sion\Run
Double-click vptray entry and setting the data
C:\Program Files\Symantec Client\vptray.exe
to
"C:\Program Files\Symantec Client\vptray.exe"
HKEY_LOCAL_MACHINE\Softwar
Double-click vptray entry and setting the data
C:\Program Files\Symantec Client\vptray.exe
to
"C:\Program Files\Symantec Client\vptray.exe"
ASKER
You got it. It was the Quotation marks. Thanks
Excellent! Thanks for posting back :-)
Try:
Windows XP Startup Programs Tracker:
http://www.dougknox.com/xp/utils/xp_starttrack.htm
Download/run the program and post the Log here.