Need a geek? Geeks to Go offers free, quality tech support -- in terms anyone can understand. Volunteers are waiting to help, friendly, technology experts who have knowledge to share, and enjoy helping others. Feel free to browse the site as a guest. However, you must log in to reply to existing topics, or to start a new topic. Other benefits of joining include richer forum features, and removal of all advertising. Learn more in our Welcome Guide Infected? Malware and Spyware Cleaning Guide. What are you waiting for? Click here to join for free today!
   
 
Reply to this topicStart new topic
Cannot delete registry keys
BL00DY_R0AR
post Jun 21 2009, 05:50 PM
Post #1


Member
**
Posts: 28
OS: XP



I've been trying to delete some registry in the folder where startup programs are, and everytime I delete them, they come back after I go to another folder and look back. Does it have to do with my Permissions? I've tried modifying the Permissions and still no luck...maybe Im doing it wrong. Can someone help me out with this?

The reason Im deleting some of these registries is because some of the startup programs I want to go away arent going away with MSCONFIG. It's eating up my performance.

Thanks!
Go to the top of the page
 
+Quote Post
rshaffer61
post Jun 23 2009, 07:38 AM
Post #2


Trusted Tech
Group Icon
Posts: 7,760
From: Memphis, Tn
OS: Xp Professional SP3, Windows 7 RC, PCLinuxOS, Win 95\98, Win 3.11



Download Autoruns from the link in my signature below:

1: Extract the Autoruns Zip file contents to a folder.
2: Double-click the "Autoruns.exe".
3: Click on the "Everything" tab
4: Remove any entries that mention "File Not Found" by right-clicking the entry and select Delete.
5: Go to File then to Export As.
6: Save AutoRuns.txt file to know location.
7: Attach to your next reply.

Download and install EVEREST
Open it.
1: In left pane expand Computer folder.
2: Click once on Summary
3: In upper menu, go Report
4: And then to Quick Report-Summary
5: Save it in text file, and paste it in your next post.


DO NOT INCLUDE ANYTHING UNDER THE LINE THAT SAYS "DEBUG- PCI"
Go to the top of the page
 
+Quote Post
BL00DY_R0AR
post Jun 23 2009, 05:37 PM
Post #3


Member
**
Posts: 28
OS: XP



Well here's everything you asked for. I attatched both files in case if it would be convenient for you. So what do you think with what you see? lol you dont have to tell me Dell sucks, I already know that wink.gif. Thank you very much!
<
<
<
<
<
--------[ EVEREST Home Edition © 2003-2005 Lavalys, Inc. ]------------------------------------------------------------

Version EVEREST v2.20.405
Homepage http://www.lavalys.com/
Report Type Quick Report
Computer BOSSDELL (BOSSDELL)
Generator DAVID CREIGHTON
Operating System Microsoft Windows XP Home Edition 5.1.2600 (WinXP Retail)
Date 2009-06-23
Time 19:28


--------[ Summary ]-----------------------------------------------------------------------------------------------------

Computer:
Operating System Microsoft Windows XP Home Edition
OS Service Pack Service Pack 3
DirectX 4.09.00.0904 (DirectX 9.0c)
Computer Name BOSSDELL (BOSSDELL)
User Name DAVID CREIGHTON

Motherboard:
CPU Type Intel Pentium 4, 2400 MHz (12 x 200)
Motherboard Name Dell Dimension 4600
Motherboard Chipset Intel Springdale i865PE
System Memory 2048 MB (DDR SDRAM)
BIOS Type Phoenix (07/21/03)
Communication Port Communications Port (COM1)
Communication Port ECP Printer Port (LPT1)

Display:
Video Adapter ASUS A9550 Secondary (128 MB)
Video Adapter ATI Radeon 9550 / X1050 Series (128 MB)
3D Accelerator ATI Radeon 9550 (RV350)

Multimedia:
Audio Adapter Creative SB X-Fi [NoDB]
Audio Adapter Intel 82801EB ICH5 - AC'97 Audio Controller [A-2/A-3]

Storage:
IDE Controller Intel® 82801EB Ultra ATA Storage Controllers
IDE Controller Intel® 82801EB Ultra ATA Storage Controllers
SCSI/RAID Controller Virtual CloneDrive
Disk Drive WDC WD400BB-75DEA0 (37 GB, IDE)
Disk Drive SanDisk U3 Cruzer Micro USB Device (14 GB, USB)
Disk Drive WD 5000AAV External USB Device (465 GB, USB)
Disk Drive WDC WD1600SB-01KBC0 (149 GB, IDE)
Optical Drive ELBY CLONEDRIVE SCSI CdRom Device (Virtual CD-ROM)
Optical Drive SAMSUNG CD-R/RW SW-248F (48x/24x/48x CD-RW)
Optical Drive SAMSUNG CD-ROM SC-148C (48x CD-ROM)
Optical Drive SanDisk U3 Cruzer Micro USB Device
SMART Hard Disks Status OK

Partitions:
C: (NTFS) 152586 MB (81382 MB free)
G: (NTFS) 38099 MB (33848 MB free)
H: (NTFS) 476937 MB (265843 MB free)
Total Size 652.0 GB (372.1 GB free)

Input:
Keyboard Standard 101/102-Key or Microsoft Natural PS/2 Keyboard
Mouse PS/2 Compatible Mouse

Network:
Network Adapter Intel® PRO/100 VE Network Connection (192.168.1.100)
Modem BCM V.92 56K Modem

Peripherals:
Printer HP Deskjet F2200 series
USB1 Controller Intel 82801EB ICH5 - USB Controller [A-2/A-3]
USB1 Controller Intel 82801EB ICH5 - USB Controller [A-2/A-3]
USB1 Controller Intel 82801EB ICH5 - USB Controller [A-2/A-3]
USB1 Controller Intel 82801EB ICH5 - USB Controller [A-2/A-3]
USB2 Controller Intel 82801EB ICH5 - Enhanced USB2 Controller [A-2/A-3]
USB Device USB Mass Storage Device
USB Device USB Mass Storage Device



Attached File(s)
Attached File  Report.txt ( 4.94K ) Number of downloads: 6
Attached File  AutoRuns.txt ( 95.4K ) Number of downloads: 6
 
Go to the top of the page
 
+Quote Post
BL00DY_R0AR
post Jun 23 2009, 05:47 PM
Post #4


Member
**
Posts: 28
OS: XP



I just ran Autoruns again and some of the top keys are back angry.gif this is what Im talking about. Is it a seperate process or program bringing them back??? But Im running Bitdefender and it wouldve(or shouldve) caught that kind of activity. What do you think?

I've attatched the new Autoruns file to this post.
Attached File(s)
Attached File  AutoRuns.txt ( 95.92K ) Number of downloads: 6
 
Go to the top of the page
 
+Quote Post
rshaffer61
post Jun 23 2009, 08:35 PM
Post #5


Trusted Tech
Group Icon
Posts: 7,760
From: Memphis, Tn
OS: Xp Professional SP3, Windows 7 RC, PCLinuxOS, Win 95\98, Win 3.11



Open Autoruns, click on "Logon" tab, and UN-check:

+ dla
+ iTunesHelper
+ QuickTime Task
+ VVSN
+ zBrowser Launcher
+ ctfmon.exe (only check this if you do not use multi language on your keyboard)

Let me know if the ones that keep coming back are in the above list


When done restart computer and then:


Download Temp File Cleaner (TFC)
Double click on TFC.exe to run the program.
Click on Start button to begin cleaning process.
TFC will close all running programs, and it may ask you to restart computer.

Download Auslogics Defrag from the link in my signature below. Auslogics Defrag in my opinion is better because:

It does a more comprehensive job at Defragging
It will actually show you what it is doing
At the end of working it will show you how much speed you picked up
You can view a online log of the files that Auslogics defragged
Go to the top of the page
 
+Quote Post
rshaffer61
post Jun 23 2009, 11:50 PM
Post #6


Trusted Tech
Group Icon
Posts: 7,760
From: Memphis, Tn
OS: Xp Professional SP3, Windows 7 RC, PCLinuxOS, Win 95\98, Win 3.11



One thing i need to let you know also.

QuickTime Task - you can kill it, but the very next time QT is used, that sucker will reinstall itself as a startup again.
The only way...
Download, and run QuickTime Killer: http://www.softpedia.com/get/System/Launch...me-Killer.shtml
After downloading, double click on EnGraphQuickTimeKillerInstaller.msi file.
You may be asked to download, and install .NET Framework
QuickTime Killer will remove QuickTime from start up and kill any running QuickTime processes. This application runs silently at start up and closes itself as soon as it takes care of QuickTime. QuickTime itself won't be removed from your computer, and will be available whenever needed.
NOTE. QuickTime is not a threat, but unnecessary startup, which can't be disabled in any other way.



ctfmon.exe - same story
Download, and run CTFMON-Remover: http://www.gerhard-schlager.at/en/projects/ctfmonremover/
[i]The CTFMON-Remover helps you removing the annoying CTFMON.EXE from your Windows operating system. The program is easy to use and displays whether the CTFMON.EXE is installed and running or not. If it was found then you can remove it within seconds. Just in case that you need the CTFMON sometime in the future there is also an option to restore the original one.
Note:The CTFMON.EXE is among other things responsible for changing the language schema of your keyboard (e.g. for switching between the German and English keyboard layout). So in case you are using this feature you shouldn't remove or disable the CTFMON.EXE!
NOTE. CTFMON.EXE is not a threat, but unnecessary startup, which can't be disabled in any other way.


thanks to Broni for the above information

This post has been edited by rshaffer61: Jun 23 2009, 11:51 PM
Go to the top of the page
 
+Quote Post
BL00DY_R0AR
post Jun 24 2009, 05:57 AM
Post #7


Member
**
Posts: 28
OS: XP



Okay I'll try those things. But why is it that I can't delete ANY entries in that particular RUN folder? Not just the qtask.exe. I was able to delete other things in other folders...It's wierd. And I close Autoruns and when I restart the program they reappear.

EDIT:
I uninstalled Quicktime, and it still comes back. Could it be a permissions thing? Im signed on as computer Admin.

This post has been edited by BL00DY_R0AR: Jun 24 2009, 06:16 AM
Go to the top of the page
 
+Quote Post
rshaffer61
post Jun 24 2009, 09:40 AM
Post #8


Trusted Tech
Group Icon
Posts: 7,760
From: Memphis, Tn
OS: Xp Professional SP3, Windows 7 RC, PCLinuxOS, Win 95\98, Win 3.11



Anytime you run any program or file that requires quicktime then that entry will reappear.

Ctfmon.exe will reappear also if it is not disabled as i stated above or by doing the following. One of the two methods will assure that it will not return.

Go to:



Control Panel then to Regional and Language Options

Click on the Languages Tab then click the Details button

Click on the Advanced tab

Check the box that says Turn off advanced text services option

Click A and then OK

This post has been edited by rshaffer61: Jun 24 2009, 09:55 PM
Go to the top of the page
 
+Quote Post
diabillic
post Jun 24 2009, 09:47 AM
Post #9


Member
***
Posts: 595
From: localhost
OS: A wide variety



It should be giving you an error code. Please give the me the exact error code you get when you try to delete it. It sounds like, as you said, a permissions issue.

Are you logged in as an Administrator? Have you tried it in Safe Mode?

quick edit: you can try to use supershell to delete the key as well.

This post has been edited by diabillic: Jun 24 2009, 09:51 AM
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 

Collapse

> Similar Topics

    Topic Title Replies / Views Topic Information
No New Posts   1 / 231 17th October 2005 - 11:00 AM
itguy0041 started - last by itguy0041
No New Posts   2 / 4,335 4th July 2008 - 03:08 PM
Robster the Lobster started - last by Robster the Lobster
No new   23 / 233 13th October 2009 - 10:13 AM
crazychilean7 started - last by Rorschach112
No New Posts   1 / 48 14th October 2009 - 05:50 AM
tashmt started - last by rshaffer61

RSS Time is now: 8th November 2009 - 01:18 AM

Advertisements do not imply our endorsement of that product or service. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks mentioned on this page are the property of their respective owners.

© Geeks to Go, Inc. | All Rights Reserved | Privacy Policy | Advertising