dbdan
asked on
Which items can I remove from startup menu in msconfig without damaging Window XP OS
The following items are listed in the startup tab in mscofig which can I safely remove from startup without huting Windows XP Home OS:
Startup Item Command
qdezpad C:Windows\qdezpad.exe
svxhost svxhost.exe
smsc smsc.exe
optimize "C:\Program Files\internet
optimizer\optimize.exe"
smsc smsc.exe
rundll32 rundll32.exe nview.dll,nViewLoadHook
wserv32 wserv32.exe
eber C:\Documents and
Settings\Owner\Application Data\eber
tuyak C:\Windows\System32\tuyak. exe
svxhost svxhost.exe
Microsoft Office C:\PROGA~1\MICROS~2\Offcie 10
\OSA.EXE -b -1
hpsydrv c:\windows\system\hpsysdrv .exe
hkcmd C:\Windows\System32\hkcmd. exe
KBD C:\HP\KBD\KBD.exe
sgtray C:\Program Files\VERITAS Software\Update
Manager\sgtray...
RECGUARD C:\WINDOWS\SMINST\RECGFUAR D.EXE
nwiz nwiz.exe/installquiet /keeploaded
ps2 C:\Windows\system32\ps2.ex e
~9E8A C:\DOCUME~\Owner\LOCALS~\T emp\~9E8A
.temp.exe
wserv32 wserv32.exe
yfrxlylj C:\WINDOWS\System32\yfrxly lj.exe
Save C:\PROGA~1\Save\Save.exe
bridge rundll32.exe "C:\WINDOWS\System32
\bridge.dll".Load
ycdhoxl- C:\WINDOWS\System32\ycdhox h.exe
alchem C:\WINDOWS\alchem.exe
istsvc C:ProgramFiles\ISTsvc\Ists vc\.exe
msbb c:\docume~1\owner\locals~1 \temp\msbb .exe
omniscient C:\Program Files\WindowsSA\omniscient .exe
ccApp C:\Program Files\Common Files\Symantec
Shared\ccapp
cfgwiz C:\Program Files\Common Files\Symantec
Shared\cfgwiz
UrlstCK C:\Program Files\Norton Internet ecurity\UrlstCK
.exe
nls C:\Program Files\Navisearch\bin\nls.e xe
bargains C:\Program Files\bulseye Network\bin\bargains
.exe
odezypad C:WINDOWS\odezypad.exe
Thanks,
Dan
Startup Item Command
qdezpad C:Windows\qdezpad.exe
svxhost svxhost.exe
smsc smsc.exe
optimize "C:\Program Files\internet
optimizer\optimize.exe"
smsc smsc.exe
rundll32 rundll32.exe nview.dll,nViewLoadHook
wserv32 wserv32.exe
eber C:\Documents and
Settings\Owner\Application
tuyak C:\Windows\System32\tuyak.
svxhost svxhost.exe
Microsoft Office C:\PROGA~1\MICROS~2\Offcie
\OSA.EXE -b -1
hpsydrv c:\windows\system\hpsysdrv
hkcmd C:\Windows\System32\hkcmd.
KBD C:\HP\KBD\KBD.exe
sgtray C:\Program Files\VERITAS Software\Update
Manager\sgtray...
RECGUARD C:\WINDOWS\SMINST\RECGFUAR
nwiz nwiz.exe/installquiet /keeploaded
ps2 C:\Windows\system32\ps2.ex
~9E8A C:\DOCUME~\Owner\LOCALS~\T
.temp.exe
wserv32 wserv32.exe
yfrxlylj C:\WINDOWS\System32\yfrxly
Save C:\PROGA~1\Save\Save.exe
bridge rundll32.exe "C:\WINDOWS\System32
\bridge.dll".Load
ycdhoxl- C:\WINDOWS\System32\ycdhox
alchem C:\WINDOWS\alchem.exe
istsvc C:ProgramFiles\ISTsvc\Ists
msbb c:\docume~1\owner\locals~1
omniscient C:\Program Files\WindowsSA\omniscient
ccApp C:\Program Files\Common Files\Symantec
Shared\ccapp
cfgwiz C:\Program Files\Common Files\Symantec
Shared\cfgwiz
UrlstCK C:\Program Files\Norton Internet ecurity\UrlstCK
.exe
nls C:\Program Files\Navisearch\bin\nls.e
bargains C:\Program Files\bulseye Network\bin\bargains
.exe
odezypad C:WINDOWS\odezypad.exe
Thanks,
Dan
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
I really do not know what the following is but it seems to non-relevant
Save C:\PROGA~1\Save\Save.exe
Save C:\PROGA~1\Save\Save.exe
tuyak C:\Windows\System32\tuyak. exe
~9E8A C:\DOCUME~\Owner\LOCALS~\T emp\~9E8A
.temp.exe
ycdhoxl- C:\WINDOWS\System32\ycdhox h.exe
alchem C:\WINDOWS\alchem.exe id a known spyware
http://www.anti-spy.info/file/alchem.exe.html
~9E8A C:\DOCUME~\Owner\LOCALS~\T
.temp.exe
ycdhoxl- C:\WINDOWS\System32\ycdhox
alchem C:\WINDOWS\alchem.exe id a known spyware
http://www.anti-spy.info/file/alchem.exe.html
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
I agree with crazyone, but to go from your list, You have alot of spyware and maybe viruses as well....here's what I think:
qdezpad C:Windows\qdezpad.exe
---unknown file...most likely spyware or viruses and is probably related to odezypad which is the last one in your list.
svxhost svxhost.exe
---could be a worm....Trend micro says: wrm_sdbot.jb
smsc smsc.exe
---This one could be a worm ... the worm_agobot.wf (trend micro)
optimize "C:\Program Files\internet
optimizer\optimize.exe"
---this one is spyware
smsc smsc.exe
---This one could be a worm ... the worm_agobot.wf (trend micro)
wserv32 wserv32.exe
---another worm...trend micro: worm_rbot.af
eber C:\Documents and
Settings\Owner\Application Data\eber
---according to some security web sites, this one should be removed (They dont say what it is tho...and i really didnt want to look too hard): http://www.wilderssecurity.com/showthread.php?t=28060&goto=nextoldest
tuyak C:\Windows\System32\tuyak. exe
---may be spyware/virus/trojan/or worm related....if you dont know what it is....disable or remove it.
svxhost svxhost.exe
---same as before: ---could be a worm....Trend micro says: wrm_sdbot.jb
RECGUARD C:\WINDOWS\SMINST\RECGFUAR D.EXE
---This is named wrong....usually it is named RECGUARD.EXE so could be bad...virus/troj/worm....m aybe spyware: see here for what the real one is: http://www.kephyr.com/filedb/index.php?viewtopic=C:%5CWINDOWS%5CSMINST%5C
~9E8A C:\DOCUME~\Owner\LOCALS~\T emp\~9E8A
.temp.exe
---This is a very suspect file. first off the big clue is it is a TEMP folder...second is iti s named reallllyyy weird. Thirdly, it is an executable TEMP file....meaning it is a filename.TEMP.EXE so something is up. so red flag and kill this boy.
wserv32 wserv32.exe
---again same: ---another worm...trend micro: worm_rbot.af
yfrxlylj C:\WINDOWS\System32\yfrxly lj.exe
---spyware related most likely. clue that tells you this file is suspect. one it is probably a HIDDEN file, two it is named weird. So remove.
Save C:\PROGA~1\Save\Save.exe
---definitely spyware. Related to WhenU.com
bridge rundll32.exe "C:\WINDOWS\System32
\bridge.dll".Load
---adware/spyware related to Adware.WinFavorites which is an adware program that downloads advertisements onto your computer. so remove
ycdhoxl- C:\WINDOWS\System32\ycdhox h.exe
---spyware related most likely. clue that tells you this file is suspect. one it is probably a HIDDEN file, two it is named weird. So remove.
alchem C:\WINDOWS\alchem.exe
---as stated by someone else spyware...
istsvc C:ProgramFiles\ISTsvc\Ists vc\.exe
---adware/spyware known as ISTBar. remove it
msbb c:\docume~1\owner\locals~1 \temp\msbb .exe
---definitely spyware. called 180 solutions. Remove.
omniscient C:\Program Files\WindowsSA\omniscient .exe
---spyware remove this.
nls C:\Program Files\Navisearch\bin\nls.e xe
---probably spyware...I dunno for sure...but I did find this: http://www.newbie.org/help/messages/27994.html
bargains C:\Program Files\bulseye Network\bin\bargains
.exe
---spyware... remove it..
odezypad C:WINDOWS\odezypad.exe
---Same reason as above.
qdezpad C:Windows\qdezpad.exe
---unknown file...most likely spyware or viruses and is probably related to odezypad which is the last one in your list.
svxhost svxhost.exe
---could be a worm....Trend micro says: wrm_sdbot.jb
smsc smsc.exe
---This one could be a worm ... the worm_agobot.wf (trend micro)
optimize "C:\Program Files\internet
optimizer\optimize.exe"
---this one is spyware
smsc smsc.exe
---This one could be a worm ... the worm_agobot.wf (trend micro)
wserv32 wserv32.exe
---another worm...trend micro: worm_rbot.af
eber C:\Documents and
Settings\Owner\Application
---according to some security web sites, this one should be removed (They dont say what it is tho...and i really didnt want to look too hard): http://www.wilderssecurity.com/showthread.php?t=28060&goto=nextoldest
tuyak C:\Windows\System32\tuyak.
---may be spyware/virus/trojan/or worm related....if you dont know what it is....disable or remove it.
svxhost svxhost.exe
---same as before: ---could be a worm....Trend micro says: wrm_sdbot.jb
RECGUARD C:\WINDOWS\SMINST\RECGFUAR
---This is named wrong....usually it is named RECGUARD.EXE so could be bad...virus/troj/worm....m
~9E8A C:\DOCUME~\Owner\LOCALS~\T
.temp.exe
---This is a very suspect file. first off the big clue is it is a TEMP folder...second is iti s named reallllyyy weird. Thirdly, it is an executable TEMP file....meaning it is a filename.TEMP.EXE so something is up. so red flag and kill this boy.
wserv32 wserv32.exe
---again same: ---another worm...trend micro: worm_rbot.af
yfrxlylj C:\WINDOWS\System32\yfrxly
---spyware related most likely. clue that tells you this file is suspect. one it is probably a HIDDEN file, two it is named weird. So remove.
Save C:\PROGA~1\Save\Save.exe
---definitely spyware. Related to WhenU.com
bridge rundll32.exe "C:\WINDOWS\System32
\bridge.dll".Load
---adware/spyware related to Adware.WinFavorites which is an adware program that downloads advertisements onto your computer. so remove
ycdhoxl- C:\WINDOWS\System32\ycdhox
---spyware related most likely. clue that tells you this file is suspect. one it is probably a HIDDEN file, two it is named weird. So remove.
alchem C:\WINDOWS\alchem.exe
---as stated by someone else spyware...
istsvc C:ProgramFiles\ISTsvc\Ists
---adware/spyware known as ISTBar. remove it
msbb c:\docume~1\owner\locals~1
---definitely spyware. called 180 solutions. Remove.
omniscient C:\Program Files\WindowsSA\omniscient
---spyware remove this.
nls C:\Program Files\Navisearch\bin\nls.e
---probably spyware...I dunno for sure...but I did find this: http://www.newbie.org/help/messages/27994.html
bargains C:\Program Files\bulseye Network\bin\bargains
.exe
---spyware... remove it..
odezypad C:WINDOWS\odezypad.exe
---Same reason as above.
ASKER
Crazyone good advice on the removal of startup menu items and which to remove
Wake-up Great line by line breakdown of each startup menu items
Wake-up Great line by line breakdown of each startup menu items
aww...no points for me?! hehe...sokay....
Glad to be of help!
Is everything working alright?
Glad to be of help!
Is everything working alright?
Personally I suggest backing up your personal files and re-installing Windows because your computer is infected to all hell. DEFINITELY run SpyBot, Ad-Ware and your anti-virus programs. To manage your start-up I suggest using a program such as:
Startup Control Panel
http://www.download.com/Startup-Control-Panel/3000-2094-1539340.html?tag=lst-0-1
Startup Mechanic
http://www.download.com/Startup-Mechanic/3000-2086-10316039.html?tag=lst-0-2
Startup Inspector
http://www.download.com/Startup-Inspector-for-Windows/3000-2086-10294569.html?tag=lst-0-3
They are all free and full of information concerning what starts, what location the file is in and descriptions of the file.
Good luck!
-AR
Startup Control Panel
http://www.download.com/Startup-Control-Panel/3000-2094-1539340.html?tag=lst-0-1
Startup Mechanic
http://www.download.com/Startup-Mechanic/3000-2086-10316039.html?tag=lst-0-2
Startup Inspector
http://www.download.com/Startup-Inspector-for-Windows/3000-2086-10294569.html?tag=lst-0-3
They are all free and full of information concerning what starts, what location the file is in and descriptions of the file.
Good luck!
-AR
Here are a few of sites where you can look up the startup items individually. That and / or the above mentioned program of startup inspector, you should be able to determine what startup programs are system programs or things that should not be running. Also always start with a viurs scan and scan for spyware. After you scan/remove any viruses and/or spyware, you will have a good starting point to solve other issues.
http://www.windowsstartup.com/wso/index.php
http://www.pacs-portal.co.uk/startup_index.htm
http://www.liutilities.com/products/wintaskspro/processlibrary/
Hope this helps.
Mike
http://www.windowsstartup.com/wso/index.php
http://www.pacs-portal.co.uk/startup_index.htm
http://www.liutilities.com/products/wintaskspro/processlibrary/
Hope this helps.
Mike
Couple of more places to look up what's running in your task manager:
http://www.answersthatwork.com/
http://www.greatis.com/regrun3appdatabase.htm
http://www.answersthatwork.com/
http://www.greatis.com/regrun3appdatabase.htm
ASKER
Thanks DWYee
In general you don't need any startup items so you can delete them all unless you want some specific programs like antivirus-realtime, internet,screen capture utilities,...etc; There are so many softwares that can help you by making you disable them and enable at will.
(1) Advanced Uninstaller. ------------- Allows you to enable, disable, remove and run selected option.
(2) Reg Organizer. ---------------- Could be the most powerful registry tool .... it also helps you keep track of the startup items.
(3) Toniart's Easycleaner ( freeware ) ---------- this is good and has many options and also helps you with the startup items and the latest good news is XP version is now available but you have to take a careful look when you delete unnecessary files " If you use this option " Because some files that have extentions like .bak can play an important role in some programs.
(4) There are many other softwares. Visit " www.zilla-soft.com " -- all good freewares.... you may find some programs that are only for startup items at " www.downloads.com " or " www.freedownloadscenter.com ".
(1) Advanced Uninstaller. ------------- Allows you to enable, disable, remove and run selected option.
(2) Reg Organizer. ---------------- Could be the most powerful registry tool .... it also helps you keep track of the startup items.
(3) Toniart's Easycleaner ( freeware ) ---------- this is good and has many options and also helps you with the startup items and the latest good news is XP version is now available but you have to take a careful look when you delete unnecessary files " If you use this option " Because some files that have extentions like .bak can play an important role in some programs.
(4) There are many other softwares. Visit " www.zilla-soft.com " -- all good freewares.... you may find some programs that are only for startup items at " www.downloads.com " or " www.freedownloadscenter.com ".
I definitely agree with way12go. I suggest that you just disable all startup items which is very safe in windows XP unlike in ME and 98 where you have to leave systray, loadpowerprofile etc. Then if you have a spyware remover like what all the guys suggested run it. It's better to run the program if it's disabled in startup because some of these spywares cannot remove spy programs while it's running. After doing this, you can now enable the programs you need running in the background like anti-virus software and spyware remover. :) Good Luck!!!
optimize svxhost svxhost.exe