Link to home
Start Free TrialLog in
Avatar of dbdan
dbdan

asked on

Which items can I remove from startup menu in msconfig without damaging Window XP OS

The following items are listed in the startup tab in mscofig which can I safely remove from startup without huting Windows XP Home OS:

Startup Item             Command
qdezpad                   C:Windows\qdezpad.exe
svxhost                     svxhost.exe
smsc                        smsc.exe
optimize             "C:\Program Files\internet  
                         optimizer\optimize.exe"
smsc                         smsc.exe
rundll32             rundll32.exe nview.dll,nViewLoadHook
wserv32             wserv32.exe
eber                  C:\Documents and                
                       Settings\Owner\Application Data\eber
tuyak                C:\Windows\System32\tuyak.exe
svxhost            svxhost.exe
Microsoft Office  C:\PROGA~1\MICROS~2\Offcie10          
                        \OSA.EXE -b -1
hpsydrv           c:\windows\system\hpsysdrv.exe
hkcmd            C:\Windows\System32\hkcmd.exe
KBD               C:\HP\KBD\KBD.exe
sgtray            C:\Program Files\VERITAS Software\Update
                    Manager\sgtray...
RECGUARD      C:\WINDOWS\SMINST\RECGFUARD.EXE
nwiz                nwiz.exe/installquiet /keeploaded
ps2                 C:\Windows\system32\ps2.exe
~9E8A            C:\DOCUME~\Owner\LOCALS~\Temp\~9E8A
                      .temp.exe
wserv32         wserv32.exe
yfrxlylj            C:\WINDOWS\System32\yfrxlylj.exe
Save              C:\PROGA~1\Save\Save.exe
bridge            rundll32.exe "C:\WINDOWS\System32
                    \bridge.dll".Load
ycdhoxl-        C:\WINDOWS\System32\ycdhoxh.exe
alchem         C:\WINDOWS\alchem.exe
istsvc           C:ProgramFiles\ISTsvc\Istsvc\.exe
msbb           c:\docume~1\owner\locals~1\temp\msbb.exe
omniscient   C:\Program Files\WindowsSA\omniscient.exe
ccApp         C:\Program Files\Common Files\Symantec
                 Shared\ccapp
cfgwiz        C:\Program Files\Common Files\Symantec
                 Shared\cfgwiz  
UrlstCK      C:\Program Files\Norton Internet ecurity\UrlstCK
                 .exe
nls            C:\Program Files\Navisearch\bin\nls.exe
bargains   C:\Program Files\bulseye Network\bin\bargains
                .exe
odezypad   C:WINDOWS\odezypad.exe

Thanks,
Dan
                 













Avatar of CrazyOne
CrazyOne
Flag of United States of America image

This one you can remove in in fact it looks like a virus

optimize             svxhost            svxhost.exe

SOLUTION
Avatar of CrazyOne
CrazyOne
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I really do not know what the following is but it seems to non-relevant

Save              C:\PROGA~1\Save\Save.exe
tuyak                C:\Windows\System32\tuyak.exe
~9E8A            C:\DOCUME~\Owner\LOCALS~\Temp\~9E8A
                      .temp.exe
ycdhoxl-        C:\WINDOWS\System32\ycdhoxh.exe

alchem         C:\WINDOWS\alchem.exe id a known spyware
http://www.anti-spy.info/file/alchem.exe.html
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I agree with crazyone, but to go from your list, You have alot of spyware and maybe viruses as well....here's what I think:

qdezpad                   C:Windows\qdezpad.exe
---unknown file...most likely spyware or viruses and is probably related to odezypad which is the last one in your list.  

svxhost                     svxhost.exe
---could be a worm....Trend micro says: wrm_sdbot.jb

smsc                        smsc.exe
---This one could be a worm ... the worm_agobot.wf (trend micro)

optimize             "C:\Program Files\internet  
                         optimizer\optimize.exe"
---this one is spyware

smsc                         smsc.exe
---This one could be a worm ... the worm_agobot.wf (trend micro)

wserv32             wserv32.exe
---another worm...trend micro: worm_rbot.af

eber                  C:\Documents and                
                       Settings\Owner\Application Data\eber
---according to some security web sites, this one should be removed (They dont say what it is tho...and i really didnt want to look too hard): http://www.wilderssecurity.com/showthread.php?t=28060&goto=nextoldest

tuyak                C:\Windows\System32\tuyak.exe
---may be spyware/virus/trojan/or worm related....if you dont know what it is....disable or remove it.

svxhost            svxhost.exe
---same as before: ---could be a worm....Trend micro says: wrm_sdbot.jb
RECGUARD      C:\WINDOWS\SMINST\RECGFUARD.EXE
---This is named wrong....usually it is named RECGUARD.EXE so could be bad...virus/troj/worm....maybe spyware: see here for what the real one is: http://www.kephyr.com/filedb/index.php?viewtopic=C:%5CWINDOWS%5CSMINST%5C

~9E8A            C:\DOCUME~\Owner\LOCALS~\Temp\~9E8A
                      .temp.exe
---This is a very suspect file.  first off the big clue is it is a TEMP folder...second is iti s named reallllyyy weird.  Thirdly, it is an executable TEMP file....meaning it is a filename.TEMP.EXE  so something is up.  so red flag and kill this boy.

wserv32         wserv32.exe
---again same: ---another worm...trend micro: worm_rbot.af

yfrxlylj            C:\WINDOWS\System32\yfrxlylj.exe
---spyware related most likely.  clue that tells you this file is suspect.  one it is probably a HIDDEN file, two it is named weird.  So remove.

Save              C:\PROGA~1\Save\Save.exe
---definitely spyware.  Related to WhenU.com

bridge            rundll32.exe "C:\WINDOWS\System32
                    \bridge.dll".Load
---adware/spyware related to Adware.WinFavorites which is an adware program that downloads advertisements onto your computer.  so remove

ycdhoxl-        C:\WINDOWS\System32\ycdhoxh.exe
---spyware related most likely.  clue that tells you this file is suspect.  one it is probably a HIDDEN file, two it is named weird.  So remove.

alchem         C:\WINDOWS\alchem.exe
---as stated by someone else spyware...
istsvc           C:ProgramFiles\ISTsvc\Istsvc\.exe
---adware/spyware known as ISTBar.  remove it

msbb           c:\docume~1\owner\locals~1\temp\msbb.exe
---definitely spyware.  called 180 solutions.  Remove.

omniscient   C:\Program Files\WindowsSA\omniscient.exe
---spyware remove this.

nls            C:\Program Files\Navisearch\bin\nls.exe
---probably spyware...I dunno for sure...but I did find this: http://www.newbie.org/help/messages/27994.html

bargains   C:\Program Files\bulseye Network\bin\bargains
                .exe
---spyware... remove it..
odezypad   C:WINDOWS\odezypad.exe
---Same reason as above.  
Avatar of dbdan
dbdan

ASKER

Crazyone good advice on the removal of startup menu items and which to remove
Wake-up Great line by line breakdown of each startup menu items
aww...no points for me?!  hehe...sokay....

Glad to be of help!

Is everything working alright?
Personally I suggest backing up your personal files and re-installing Windows because your computer is infected to all hell. DEFINITELY run SpyBot, Ad-Ware and your anti-virus programs. To manage your start-up I suggest using a program such as:
Startup Control Panel
http://www.download.com/Startup-Control-Panel/3000-2094-1539340.html?tag=lst-0-1
Startup Mechanic
http://www.download.com/Startup-Mechanic/3000-2086-10316039.html?tag=lst-0-2
Startup Inspector
http://www.download.com/Startup-Inspector-for-Windows/3000-2086-10294569.html?tag=lst-0-3
They are all free and full of information concerning what starts, what location the file is in and descriptions of the file.
Good luck!

-AR
Here are a few of sites where you can look up the startup items individually.  That and / or the above mentioned program of startup inspector, you should be able to determine what startup programs are system programs or things that should not be running.  Also always start with a viurs scan and scan for spyware.  After you scan/remove any viruses and/or spyware, you will have a good starting point to solve other issues.

http://www.windowsstartup.com/wso/index.php

http://www.pacs-portal.co.uk/startup_index.htm

http://www.liutilities.com/products/wintaskspro/processlibrary/

Hope this helps.  
Mike
Couple of more places to look up what's running in your task manager:

http://www.answersthatwork.com/

http://www.greatis.com/regrun3appdatabase.htm

Avatar of dbdan

ASKER

Thanks DWYee
In general you don't need any startup items so you can delete them all unless you want some specific programs like antivirus-realtime, internet,screen capture utilities,...etc; There are so many softwares that can help you by making you disable them and enable at will.
(1) Advanced Uninstaller. ------------- Allows you to enable, disable, remove and  run selected option.

(2) Reg Organizer. ---------------- Could be the most powerful registry tool .... it also helps you keep track of the startup items.

(3) Toniart's Easycleaner ( freeware ) ---------- this is good and has many options and also helps you with the startup items and the latest good news is XP version is now available but you have to take a careful look when you delete unnecessary files " If you use this option " Because some files that have extentions like .bak can play an important role in some programs.

(4) There are many other softwares. Visit " www.zilla-soft.com "  -- all good freewares.... you may find some programs that are only for startup items at " www.downloads.com " or " www.freedownloadscenter.com ".
I definitely agree with way12go. I suggest that you just disable all startup items which is very safe in windows XP unlike in ME and 98 where you have to leave systray, loadpowerprofile etc. Then if you have a spyware remover like what all the guys suggested run it. It's better to run the program if it's disabled in startup because some of these spywares cannot remove spy programs while it's running. After doing this, you can now enable the programs you need running in the background like anti-virus software and spyware remover. :) Good Luck!!!