PDA

View Full Version : Deleting a shortcut



Winston
02-13-2003, 05:29 AM
Whenever Windows starts up on my computer it begins to look for a shortcut to a program I have uninstalled. I have unticked the item on the start up menu on the system configuration utility page but whenever I reset the computer it begins to look for the non-existent shortcut and when I check the start up menu the item has ticked itself again.

Does anyone know how I can completely delete the shortcut or item from the start up menu or any other way I can prevent the computer from searching for the shortcut everytime I start Windows?

YODA74
02-13-2003, 07:35 AM
well what is the short cut and what windows are you running.
your going to have to do some registry work so make a back up of your system.

let us know what you have and we'll go from there

Winston
02-13-2003, 11:12 AM
It's Windows 98 and the short cut is C:\PALTALK\PNETAW~1.EXE

I don't know how to back up my system :confused:

Budfred
02-13-2003, 11:26 AM
To backup your system, the first thing to do is make a copy of the Registry file and store it on a CDR or floppy disk. This way you can restore it if you make a major error in the Registry. The best way to back up an entire system is to copy an image of it to another hard drive, but I am guessing you don't have the extra hard drive to do that. The next best is probably a tape backup, but again, you probably don't have that. That leaves using CDRs or CDRWs if you have a CD burner. You can simply copy the most important files onto a CD or you can use a backup program and make a copy of your entire drive. Depending on how big your drive is, this can add up to a lot of CDs. Even if you don't do anything with the Registry, it is a good idea to backup occasionally to make sure you don't lose valuable files if a drive crashes or if you get hit by a virus.

That said: the first thing I would do is download Spybot Search & Destroy to see if it can remove the file. Spybot scans for spyware, but it has other tools for removing files from your startup list. You can get it here:

http://www.pcguide.com/vb/showthread.php?s=&threadid=15179

YODA74
02-13-2003, 11:47 AM
Definatly get what Budfred suggested this program Paltalk is nothing short of Adware.. just looked at it at pestcontrol
http://www.safersite.com/PestInfo/P/PalTalk.asp

Not sure how you removed it in thie first place am assuming you used the Add/Remove in control panel?

you'll have to remove the pnetaware.exe from the windows/startup directory and also thru regedit

if you have any other questions holler

Winston
02-13-2003, 11:53 AM
It actually had an uninstall option that I used but it obviously didn't work properly :mad:

Thanks for the advice, I've used the Spybot software to find and remove the troublesome pest and it has now been eradicated :D

Budfred
02-13-2003, 12:07 PM
Spyware and other forms of malware may tell you they have uninstall utilities, but they often are either lying or they are so badly programmed that they don't work properly. I run Spybot regularly and supplement with AdAware in addition to running a firewall and antivirus to protect against this scum...

Jhorner1
02-13-2003, 12:31 PM
The shortcut may be in your startup folder. This folder can usually be found on your start menu. just open it, and if the shortcut is, there delete it.
You said that you unchecked the shortcut in the system configuration utility. Did you also check the selective startup radio button on the general tab? If not your system will try to start every program onthe statup tab.

mjc
02-13-2003, 12:55 PM
The shortcut may be in your startup folder. This folder can usually be found on your start menu. just open it, and if the shortcut is, there delete it.
You said that you unchecked the shortcut in the system configuration utility. Did you also check the selective startup radio button on the general tab? If not your system will try to start every program onthe statup tab.

Paltalk is known spyware with a defective uninstaller......

No matter what the end user checks/unchecks the unistaller will still leave bits and peices behind that will cause problems.

Typically most of these crapware items will recommend reinstalling to fix such problems.

They (the developers) want these products on your machine an purposefully make it as difficult a process as possible to remove them, in hopes that most users will not bother with a difficult manual removal.

Yes, for a legitimate program, that would work, but with crapware all normal rules are in doubt.

Winston
02-14-2003, 10:57 AM
Is there anything that is absolutely essential in the start up folder? My computer starts a lot faster when I prevent any programs from starting up automatically so is it ok to pretty much stop all of them from beginning automatically?

mjc
02-14-2003, 11:19 AM
Download Startup List (http://www.spywareinfo.com/~merijn/) and paste the log in a post, then we can go over what is and isn't needed, chances are a bunch of it isn't. Usually Explorer, systray and an AV are the basices.....but there are others that may need to be there, too.

Winston
02-14-2003, 11:48 AM
StartupList report, 14/02/03, 15:52:20
StartupList version: 1.51
Started from : C:\WINDOWS\TEMP\STARTUPLIST.EXE
Detected: Windows 98 SE (Win9x 4.10.2222A)
Detected: Internet Explorer v5.50 (5.50.4134.0600)
* Using default options
==================================================

Running processes:

C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\AOL 7.0\WAOL.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\ULTIMATEZIP 2.7\UZIP.EXE
C:\WINDOWS\TEMP\STARTUPLIST.EXE

--------------------------------------------------

Listing of startup folders:

Shell folders Startup:
[C:\WINDOWS\Start Menu\Programs\StartUp]
AOL 7.0 Tray Icon.lnk = C:\Program Files\AOL 7.0\aoltray.exe
UltimateZip Quick Start.lnk = C:\Program Files\UltimateZip 2.7\uzqkst.exe

Shell folders Common Startup:
[C:\WINDOWS\All Users\Start Menu\Programs\StartUp]
ZoneAlarm.lnk = C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
CountrySelection = pctptt.exe
RealTray = C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
LoadQM = loadqm.exe
SiS Tray = C:\PROGRAM FILES\SIS630_V1.05\UTILITY\SISTRAY.EXE
SiS KHooker = C:\Program Files\SiS630_V1.05\utility\3d\khooker.exe
C-Media Mixer = C:\Program Files\PCI Audio Applications\Mixer.exe /startup
QuickTime Task = "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
TaskMonitor = c:\windows\taskmon.exe
SystemTray = SysTray.Exe
AVG_CC = C:\PROGRA~1\GRISOFT\AVG6\avgcc32.exe /STARTUP
ScanRegistry = c:\windows\scanregw.exe /autorun

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run Services

LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
Avgserv9.exe = C:\PROGRA~1\GRISOFT\AVG6\Avgserv9.exe
TrueVector = C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

Yahoo! Pager = C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
OPQFile = C:\WINDOWS\regedit.exe /s C:\WINDOWS\SYSTEM\rad23853.tmp
MSMSGS = "C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE" /background
msnmsgr = "C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE" /background

--------------------------------------------------

C:\WINDOWS\WININIT.BAK listing:
(Created 13/2/2003, 16:20:36)

[Rename]
NUL=C:\PROGRA~1\WINDOW~1\SETUP_WM.EXE
NUL=C:\WINDOWS\SYSTEM\WMPLOC.DLL

--------------------------------------------------

C:\AUTOEXEC.BAT listing:

C:\PROGRA~1\GRISOFT\AVG6\bootup.exe

--------------------------------------------------


Enumerating Browser Helper Objects:

(no name) - C:\WINDOWS\SYSTEM\MBHO.DLL - {D14641FA-445B-448E-9994-209F7AF15641}

--------------------------------------------------

Enumerating Task Scheduler jobs:

Tune-up Application Start.job

--------------------------------------------------

Enumerating Download Program Files:

[YInstStarter Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\YINSTHELPER.DLL
CODEBASE = http://download.yahoo.com/dl/installs/yinst.cab

[CRegistryDownload Class]
InProcServer32 = C:\WINDOWS\SYSTEM\REGDLOAD.DLL
CODEBASE = http://www.paltalk.com/prod/RegDload.CAB

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH.OCX
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

[Shockwave ActiveX Control]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\DIRECTOR\SWDIR.DLL
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

[IntraLaunch.MainControl]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\INTRALAUNCH.OCX
CODEBASE = file://D:\system\IntraLaunch.CAB

--------------------------------------------------
End of report, 4,874 bytes
Report generated in 4.093 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

mjc
02-14-2003, 12:30 PM
The ones that are mostlikely to be performance hogs are:

Yahoo! Pager = C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
(use the program's options to disable it from running at start up)

MSMSGS = "C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE" /background (use the program's options to disable it from running at start up)

msnmsgr = "C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE" /background (use the program's options to disable it from running at start up)

<===Also it looks like you have 2 different versions of Messenger running..v5 and a later version...settle on one, probably the later, or uninstall both and just use the latest, if you aren't using either get rid of them both===>

RealTray = C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER (use the program's options to disable it from running at start up)

LoadQM = loadqm.exe (MS info on it (http://support.microsoft.com/?kbid=309418) )


You have a hompage hijacker......OPQFile = C:\WINDOWS\regedit.exe /s C:\WINDOWS\SYSTEM\rad23853.tmp


# IF you have OPQFile in msconfig:

* OPQFile"="C:\\WINDOWS\\regedit.exe /s C:\\WINDOWS\\SYSTEM\\rad3BBBD.tmp"

# Go to start, run: msconfig and deselect it from the startup group.
# Try again and see if your homepage changes again. If not do the following.
# To remove it permanently from the Registry, run regedit and navigate to:

* [HKEY_CURRENT_USER\Software\Microsoft\Windows\ CurrentVersion\Run]

# With RUN (or RUN- if it has been unchecked in msconfig) folder highlighted, right click and delete it
# Close the Registry editor, reboot and find and delete

* rad3BBBD.tmp from c:\windows\system

Also go to the Downloaded Programs folder and manually delete this....

InProcServer32 = C:\WINDOWS\SYSTEM\REGDLOAD.DLL
CODEBASE = hxxp://www.paltalk.com/prod/RegDload.CAB


Is this something work related that you purposefully installed?

[IntraLaunch.MainControl]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\INTRALAUNCH.OCX
CODEBASE = file://D:\system\IntraLaunch.CAB

Winston
02-14-2003, 01:37 PM
>Is this something work related that you purposefully installed?

[IntraLaunch.MainControl]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\INTRALAUNCH.OCX
CODEBASE = file://D:\system\IntraLaunch.CAB<

No, I don't even know what it is :confused:

mjc
02-14-2003, 02:50 PM
Then kill it too.......