Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Windows Explorer opens on startup


  • Please log in to reply

#1
AviatorTim

AviatorTim

    Member

  • Member
  • PipPip
  • 18 posts
On Windows startup (or reboot), Windows Explorer open uncommanded to the address "C:\Program Files\Common". It displays one folder named "Bin". Can anyone tell me why this window opens each time I start my computer and how I can make it stop?

This happened once before but I can't remember how I fixed it. I think it had something to do with a Real Player entry in the Windows registry but I cant' find any such entry.

Tim
  • 0

Advertisements


#2
gerryf

gerryf

    Retired Staff

  • Retired Staff
  • 11,365 posts
This usually occurs when a startup entry points to a file that is no longer present...

This one rarely shows in hijack, so download ASViewer

http://www.diamondcs...p?page=asviewer

Then save the results MAIN > SAVE

post
  • 0

#3
AviatorTim

AviatorTim

    Member

  • Topic Starter
  • Member
  • PipPip
  • 18 posts
Thanks Jerry. Downloaded AutoStart Viewer. Here's the results. I see three (all Norton related) that refer to c:\program files\common files but none that refer to c:\program files\comon.

I checked the three that refered to c:\program files\common files and they are all present. Any further ideas?

DiamondCS Autostart Viewer (www.diamondcs.com.au) - Report for Tim Morgan@LAPTOP, 03-21-2005
c:\windows\system32\autoexec.nt
C:\WINDOWS\system32\mscdexnt.exe
C:\WINDOWS\system32\redir.exe
C:\WINDOWS\system32\dosx.exe
c:\windows\system32\config.nt
C:\WINDOWS\system32\himem.sys
c:\windows\system.ini [drivers]
timer=timer.drv
c:\windows\system.ini [boot]\shell
C:\WINDOWS\Explorer.exe
c:\windows\system.ini [boot]\scrnsave.exe
C:\WINDOWS\System32\logon.scr
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell
C:\WINDOWS\Explorer.exe
HKCU\Control Panel\Desktop\scrnsave.exe
C:\WINDOWS\System32\logon.scr
HKCR\vbsfile\shell\open\command\
C:\WINDOWS\System32\WScript.exe "%1" %*
HKCR\vbefile\shell\open\command\
C:\WINDOWS\System32\WScript.exe "%1" %*
HKCR\jsfile\shell\open\command\
C:\WINDOWS\System32\WScript.exe "%1" %*
HKCR\jsefile\shell\open\command\
C:\WINDOWS\System32\WScript.exe "%1" %*
HKCR\wshfile\shell\open\command\
C:\WINDOWS\System32\WScript.exe "%1" %*
HKCR\wsffile\shell\open\command\
C:\WINDOWS\System32\WScript.exe "%1" %*
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Apoint
C:\Program Files\Apoint\Apoint.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\iamapp
C:\Program Files\Norton Personal Firewall\IAMAPP.EXE
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ccApp
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\SSC_UserPrompt
C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Symantec NetDriver Monitor
C:\PROGRA~1\SYMNET~1\SNDMon.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ctfmon.exe
C:\WINDOWS\system32\ctfmon.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\KanaWall.exe
C:\Program Files\Kana WallChanger\KanaWall.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\
C:\WINDOWS\system32\SHELL32.dll
C:\WINDOWS\system32\SHELL32.dll
C:\WINDOWS\System32\webcheck.dll


C:\WINDOWS\System32\stobject.dll
C:\WINDOWS\Tasks\Norton AntiVirus - Scan my computer - Tim Morgan.job
C:\PROGRA~1\NORTON~3\Navw32.exe
C:\WINDOWS\Tasks\Norton SystemWorks One Button Checkup.job
C:\Program Files\Common Files\Symantec Shared\NMAIN.EXE
C:\WINDOWS\Tasks\Symantec NetDetect.job
C:\Program Files\Symantec\LiveUpdate\NDETECT.EXE
C:\Documents and Settings\Tim Morgan\Start Menu\Programs\Startup\PdaNet Desktop.lnk
C:\Program Files\PdaNet for Treo 650\PdaNet.exe
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HotSync Manager.lnk
C:\Program Files\Palm\Hotsync.exe
HKLM\System\CurrentControlSet\Control\Session Manager\BootExecute
autocheck autochk *
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit
C:\WINDOWS\system32\userinit.exe
HKLM\System\CurrentControlSet\Control\WOW\cmdline
C:\WINDOWS\system32\ntvdm.exe
HKLM\System\CurrentControlSet\Control\WOW\wowcmdline
C:\WINDOWS\system32\ntvdm.exe -a %SystemRoot%\system32\krnl386
HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\system32\rsvpsp.dll
HKLM\System\CurrentControlSet\Services\VxD\JAVASUP\
C:\WINDOWS\system32\JAVASUP.VXD
  • 0

#4
gerryf

gerryf

    Retired Staff

  • Retired Staff
  • 11,365 posts
hmmm, nope don't see what I expected...have you done anything to disable long filenames? There are some tweaks that supposedly improve performance, but actually cause trouble like this...

Here's the other thing that has me scratching my head...you said that when it opens, it reveals only one thing, BIN...

and is it comon, or common
  • 0

#5
AviatorTim

AviatorTim

    Member

  • Topic Starter
  • Member
  • PipPip
  • 18 posts
Dear Gerry or anyone with info,

I isolated the problem to UsrPrmpt.exe by selectively disabling items in MSCONFIG. It's locted in C:\Program Files\Common Files\Symantec Shared\Security Center. Whenever I uncheck it for startup, the system starts without the extra Windows Explorer window popping up. Also, I had been getting an error "Generic W32 process failed. Send info to Microsoft?" error on startup which also went away when I disabled UsrPrmpt.exe.

Problem is, I can't find much info about UsrPrmpt.exe. It's part of Norton Antivirus. I found several sites stating it's necessary for Norton AntiVirus and should not be removed but no one seems to know what it does. Even a search on Symantec's own website produced no results.

Do you know what it is? I'm wondering if I have virus protection without it running and whether I should re-install Norton Antivirus.

Tim
  • 0

#6
gerryf

gerryf

    Retired Staff

  • Retired Staff
  • 11,365 posts
yes, you should reinstall...interesting that it doesn't show up as a startup file in the above program...

ASVIeWER is usually very complete....we didn't run a hijack log, i see, so I wonder if it will appear there?

Either way, yes, reinstall.
  • 0

#7
gerryf

gerryf

    Retired Staff

  • Retired Staff
  • 11,365 posts
oh, and btw, as the name implies, I suspect the program is called by another program to PROMPT THE USER for information...perhaps, something like "YOUR VIRUS DEFINITIONS ARE OUT OF DATE..."

What messages has Norton given you in the past?
  • 0

#8
AviatorTim

AviatorTim

    Member

  • Topic Starter
  • Member
  • PipPip
  • 18 posts
I follow your logic but even when it was working, I was never prompted to enter info at startup.

Tim
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP