Custom Search
Join the PC homebuilding revolution! Read the all-new, FREE 200-page online guide: How to Build Your Own PC!
NOTE: Using robot software to mass-download the site degrades the server and is prohibited. See here for more.
Find The PC Guide helpful? Please consider a donation to The PC Guide Tip Jar. Visa/MC/Paypal accepted.
Results 1 to 19 of 19

Thread: Registry Mechanic, yay or nay?

  1. #1
    Join Date
    Dec 2001
    Location
    Saskatchewan, eh
    Posts
    1,351

    Registry Mechanic, yay or nay?

    I am wondering if this program would be any good to easily stablize my windows instalation.

    http://www.winguides.com/regmech/
    Pentium R 2.5 Ghz (x64)
    8 GB memory
    Windows 7 Pro

  2. #2
    Join Date
    May 2002
    Location
    Greenville, SC, USA
    Posts
    1,085
    In what way is your Windows installation unstable?
    Sandman

  3. #3
    Join Date
    Dec 2001
    Location
    Saskatchewan, eh
    Posts
    1,351
    It's Windows. If left running too long, it crashes.
    Pentium R 2.5 Ghz (x64)
    8 GB memory
    Windows 7 Pro

  4. #4
    Join Date
    Aug 2001
    Location
    Land of 10,000 Lakes and Minnesota nice!!
    Posts
    11,071
    Which OS are you running??
    Lighten up! --- A merry heart does good like a medicine. (Proverbs 17:22)

  5. #5
    Join Date
    Jun 2003
    Location
    Finland
    Posts
    39
    At least I haven't noticed any problems with Registry Mechanic. I use EasyCleaner, too.

  6. #6
    Join Date
    May 2002
    Location
    Greenville, SC, USA
    Posts
    1,085
    Most likely this is a hardware problem - heat, inadequate or unregulated power supply, or bad component - PCI card, floppy, CD or hard drive, motherboard, memory.

    So I doubt that software will help stabilize Windows. We will need to know the specs of your system, and please include a better description of how Windows is crashing and under what circumstances.
    Sandman

  7. #7
    Join Date
    Dec 2001
    Location
    Saskatchewan, eh
    Posts
    1,351
    I am running Windows 98 SE. I would love to upgrade to 2000 or even XP but this motherboard is only compatible with the Win 98 that was installed in the first place. I will never buy a computer from Future Shop again.
    If left running for long periods the programs will open and run very slugishly. The best solution would just to be to get a new computer but... An easy solution like Registry Mechanic would be great.
    Pentium R 2.5 Ghz (x64)
    8 GB memory
    Windows 7 Pro

  8. #8
    Join Date
    Nov 2000
    Location
    The Mountain State
    Posts
    23,389
    If left running for long periods the programs will open and run very slugishly.
    The best soultion would be to find the onw with the "memory leak' and remove or update it.

    Also running next to nothing at bootup (in the background) will stabilize it some, too.
    AV, Anti-Trojan List;Browser and Email client List;Popup Killer List;Portable Apps
    “When men yield up the privilege of thinking, the last shadow of liberty quits the horizon.” - Thomas Paine
    Remember: Amateurs built the ark; professionals built the Titantic."

  9. #9
    Join Date
    Dec 2001
    Location
    Saskatchewan, eh
    Posts
    1,351
    I always thought that these problems were inherent in Windows previous to W2K and XP. How do you isolate a memory leak?
    Last edited by jes; 10-15-2003 at 04:06 AM.
    Pentium R 2.5 Ghz (x64)
    8 GB memory
    Windows 7 Pro

  10. #10
    Join Date
    Aug 2001
    Location
    Land of 10,000 Lakes and Minnesota nice!!
    Posts
    11,071
    I'm curious...how long are you talking about letting it run before it crashes??

    If your System Resources get into the 30% range you'd be a candidate...

    Right-click My Computer>Properties>Performance to view available System Resources...

    For some reason Win9x and WinMe seem to have difficulties releasing System Resources and if allowed to run for long periods of time they will eventually crash...XP apparently deals with this problem...
    Last edited by Whyzman; 10-15-2003 at 04:22 AM.
    Lighten up! --- A merry heart does good like a medicine. (Proverbs 17:22)

  11. #11
    Join Date
    Dec 2001
    Location
    Saskatchewan, eh
    Posts
    1,351
    My system resources are at 33% right now. I'm not sure why that is, I think it is usually around 70 or 80.

    If I let the system run for a day it will usually have a very slow responce time. Rebooting fixes this.
    Pentium R 2.5 Ghz (x64)
    8 GB memory
    Windows 7 Pro

  12. #12
    Join Date
    Nov 2000
    Location
    The Mountain State
    Posts
    23,389
    My system resources are at 33% right now. I'm not sure why that is, I think it is usually around 70 or 80.
    70 to 80 is not really a good starting point, that indicates there are several things (most likely 16 bit apps) running in the background form boot up. The 16 bit apps are the ones to really be concerned about, they are the resource hogs....

    If you would post a HijackThis log we could probably find somethings to trim...

    Dropping to 33% after being on for a while does seem to indicate a leak of some sort.
    AV, Anti-Trojan List;Browser and Email client List;Popup Killer List;Portable Apps
    “When men yield up the privilege of thinking, the last shadow of liberty quits the horizon.” - Thomas Paine
    Remember: Amateurs built the ark; professionals built the Titantic."

  13. #13
    Join Date
    Dec 2001
    Location
    Saskatchewan, eh
    Posts
    1,351
    Logfile of HijackThis v1.97.3
    Scan saved at 8:52:59 PM, on 10/15/03
    Platform: Windows 98 SE (Win9x 4.10.2222A)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\MSGLOOP.EXE
    C:\WINDOWS\SYSTEM\MSG32.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\PROGRAM FILES\ENCOMPASS\ENCMONTR.EXE
    C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SYMTRAY.EXE
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\SYSTEM\HIDSERV.EXE
    C:\WINDOWS\SYSTEM\TAPISRV.EXE
    C:\WINDOWS\TASKMON.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\WINDOWS\SYSTEM\HPSYSDRV.EXE
    C:\WINDOWS\SYSTEM\USBMMKBD.EXE
    C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMKEYBD.EXE
    C:\PROGRAM FILES\DIRECTCD\DIRECTCD.EXE
    C:\PROGRAM FILES\SAVE\SAVE.EXE
    C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON ANTIVIRUS\NAVAPW32.EXE
    C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\KEYBDMGR.EXE
    C:\PROGRAM FILES\WEATHERCAST\WEATHER.EXE
    C:\PROGRA~1\NETROPA\ONSCRE~1\OSD.EXE
    C:\WINDOWS\SYSTEM\WMIEXE.EXE
    C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMUSBKB2.EXE
    C:\WINDOWS\SYSTEM\DDHELP.EXE
    C:\WINDOWS\SYSTEM\SPOOL32.EXE
    C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\WINWORD.EXE
    C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\WINWORD.EXE
    C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
    C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
    C:\WINDOWS\SYSTEM\RNAAPP.EXE
    C:\WINDOWS\SYSTEM\PSTORES.EXE
    C:\UNZIPPED\HIJACKTHIS\HIJACKTHIS.EXE

    R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.searchalot.com/search.htm
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.searchalot.com/search.htm
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.searchalot.com/search.htm
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www3.sk.sympatico.ca/ajohn/apage.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.searchalot.com
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.searchalot.com/search.htm
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.searchalot.com/search.htm
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.searchalot.com/search.htm
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.searchalot.com/search.htm
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.searchalot.com
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.searchalot.com
    F1 - win.ini: run=hpfsched
    O1 - Hosts: 64.14.40.138 www.searchscout.com
    O1 - Hosts: 64.14.40.138 www.letssearch.com
    O1 - Hosts: 64.14.40.138 www.searchex.com
    O1 - Hosts: 64.14.40.138 srch.lop.com
    O1 - Hosts: 64.14.40.138 www.searchresult.net
    O1 - Hosts: 64.14.40.138 www.xupiter.com
    O1 - Hosts: 64.14.40.138 runonce.msn.com
    O1 - Hosts: 64.14.40.148 auto.search.msn.com
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun
    O4 - HKLM\..\Run: [TaskMonitor] c:\windows\taskmon.exe
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [USBMMKBD] usbmmkbd.exe
    O4 - HKLM\..\Run: [Keyboard Manager] C:\Program Files\Netropa\One-touch Multimedia Keyboard\MMKeybd.exe
    O4 - HKLM\..\Run: [Adaptec DirectCD] C:\Program Files\DirectCD\DIRECTCD.EXE
    O4 - HKLM\..\Run: [WhenUSave] C:\PROGRA~1\SAVE\Save.exe
    O4 - HKLM\..\Run: [NAV Agent] c:\PROGRA~1\NORTON~1\NORTON~1\NAVAPW32.EXE
    O4 - HKLM\..\Run: [RegistryMechanic] C:\Program Files\Registry Mechanic\RegMech.exe /QS
    O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\RunServices: [Encompass_ENCMONTR] C:\Program Files\Encompass\ENCMONTR.EXE
    O4 - HKLM\..\RunServices: [Hidserv] Hidserv.exe run
    O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
    O4 - HKLM\..\RunServices: [SymTray - Norton SystemWorks] c:\Program Files\Common Files\Symantec Shared\SymTray.exe "Norton SystemWorks"
    O4 - HKCU\..\Run: [WeatherCast] C:\PROGRA~1\WEATHE~1\Weather.exe /q
    O4 - Startup: Launch Internet Explorer Browser.lnk = C:\Program Files\Internet Explorer\IEXPLORE.EXE
    O9 - Extra button: Related (HKLM)
    O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
    O9 - Extra button: RealGuide (HKLM)
    O9 - Extra 'Tools' menuitem: Free Software Downloads (HKLM)
    O9 - Extra 'Tools' menuitem: Search the Internet (HKLM)
    O9 - Extra button: Searchalot (HKCU)
    O9 - Extra button: Downloads (HKCU)
    O14 - IERESET.INF: START_PAGE_URL=http://www.searchalot.com
    O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/game...s/y/potc_x.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/s...sh/swflash.cab
    Pentium R 2.5 Ghz (x64)
    8 GB memory
    Windows 7 Pro

  14. #14
    Join Date
    Jul 2002
    Location
    Minn
    Posts
    17,373
    I don't know much about these logs, but it looks like you may have a nasty:

    O1 - Hosts: 64.14.40.138 srch.lop.com

    Have you run a spyware scanner lately??? Don't do anything with HijackThis until one of the experts come along and look at it, but it Spybot or AdAware identifies it as a problem, you can go ahead and fix it...
    Budfred ..... Caveat Emptor....

    Helpful links SpywareBlaster... HijackThis... ATF Cleaner...

    Post a complaint about malware here!!
    So how did I get infected in the first place??

    MS MVP 2006 and ASAP member since 2004...

    If you PM me for help, expect an irritated response... Post in the forum...

  15. #15
    Join Date
    Dec 2001
    Location
    Saskatchewan, eh
    Posts
    1,351
    How about Spybot - Search & Destroy 1.2 found at:

    http://download.com.com/3000-2144-10194058.html
    Pentium R 2.5 Ghz (x64)
    8 GB memory
    Windows 7 Pro

  16. #16
    Join Date
    Aug 2000
    Location
    GreatNorthWoods
    Posts
    2,883
    You should probably get rid of

    C:\PROGRAM FILES\SAVE\SAVE.EXE

    R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.searchalot.com/search.htm
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.searchalot.com/search.htm
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.searchalot.com/search.htm
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www3.sk.sympatico.ca/ajohn/apage.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.searchalot.com
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.searchalot.com/search.htm
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.searchalot.com/search.htm
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.searchalot.com/search.htm
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.searchalot.com/search.htm
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.searchalot.com
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.searchalot.com
    F1 - win.ini: run=hpfsched
    O1 - Hosts: 64.14.40.138 www.searchscout.com
    O1 - Hosts: 64.14.40.138 www.letssearch.com
    O1 - Hosts: 64.14.40.138 www.searchex.com
    O1 - Hosts: 64.14.40.138 srch.lop.com
    O1 - Hosts: 64.14.40.138 www.searchresult.net
    O1 - Hosts: 64.14.40.138 www.xupiter.com
    O1 - Hosts: 64.14.40.138 runonce.msn.com
    O1 - Hosts: 64.14.40.148 auto.search.msn.com

    O4 - HKLM\..\Run: [WhenUSave] C:\PROGRA~1\SAVE\Save.exe

    O9 - Extra 'Tools' menuitem: Free Software Downloads (HKLM)
    O9 - Extra 'Tools' menuitem: Search the Internet (HKLM)
    O9 - Extra button: Searchalot (HKCU)
    O9 - Extra button: Downloads (HKCU)
    O14 - IERESET.INF: START_PAGE_URL=http://www.searchalot.com

  17. #17
    Join Date
    Jul 2002
    Location
    Minn
    Posts
    17,373
    jes,

    If you are asking about using Spybot, definitely a good option... If that is not what you are asking, I am not sure what you are asking???
    Budfred ..... Caveat Emptor....

    Helpful links SpywareBlaster... HijackThis... ATF Cleaner...

    Post a complaint about malware here!!
    So how did I get infected in the first place??

    MS MVP 2006 and ASAP member since 2004...

    If you PM me for help, expect an irritated response... Post in the forum...

  18. #18
    Join Date
    Nov 2000
    Location
    The Mountain State
    Posts
    23,389
    All that Steve and the following...

    These absolutely do not need to be running from boot up....

    O4 - HKLM\..\RunServices: [Encompass_ENCMONTR] C:\Program Files\Encompass\ENCMONTR.EXE
    O4 - Startup: Launch Internet Explorer Browser.lnk = C:\Program Files\Internet Explorer\IEXPLORE.EXE

    For the first one, look through the program's options and see if there is a way to disable it from running at boot. For the second....remove the link to IE in the StartupFolder

    This has also been know to cause poor performance and other problems. it is best to use only selected tools and not to let the whole thing run from startup...

    O4 - HKLM\..\RunServices: [SymTray - Norton SystemWorks] c:\Program Files\Common Files\Symantec Shared\SymTray.exe "Norton SystemWorks"
    AV, Anti-Trojan List;Browser and Email client List;Popup Killer List;Portable Apps
    “When men yield up the privilege of thinking, the last shadow of liberty quits the horizon.” - Thomas Paine
    Remember: Amateurs built the ark; professionals built the Titantic."

  19. #19
    Join Date
    Dec 2001
    Location
    Saskatchewan, eh
    Posts
    1,351
    Ok, I took the link to IE out of my startup folder but don't know what to do with the second file. There are several executables in c:\program files\encompas\ but none of them open to anything with options that I can change.
    I ran MSCONFIG and took out encompas from there. Encompas was just a bunch of tutorial about how to use Windows and the Internet.

    I ran spybot and it turned up all kinds of files:
    Attached Files Attached Files
    Last edited by jes; 10-16-2003 at 02:15 AM.
    Pentium R 2.5 Ghz (x64)
    8 GB memory
    Windows 7 Pro

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •