Windows XP start up slow

this not so much a malware issue

more of a registry change

spybot is detecting it as problem and want to start the program back up

but unfortunately the uninstall was not a success

so bits and pieces of the program still around

heres a couple of things to do

HKEY_USERS\S-1-5-21-1065397860-3967216430-2567981340-1005\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\iexplore.exe!=W=1


HKEY_USERS\S-1-5-21-1065397860-3967216430-2567981340-1005\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_UNLOCK\iexplore.exe!=W=1 <<make the change


HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SharedDlls\C:\Program Files\BulletProofSoft.com\SpywareRemover\popup-watch\PopUpWatch.exe


HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SharedDlls\C:\Program Files\BulletProofSoft.com\SpywareRemover\nopopup-watch\NoPopUpWatch.exe<<<make the change


go to your tools at the top of page and click on internet options>>security>>restricted sites>>click on sites>>put thin the address slot.. BulletProofSoft.com ..click ok then ok again to close

these can be fix with hijack

O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com/

i also found this type of fix at spybot forum so give it a try

See this post by eliuri (http://forums.spybot...mber.php?u=1744):
http://forums.spybot...mp;postcount=16
In this thread:
Scan Result
http://forums.spybot...read.php?t=6749
Summary:

Go into Internet Explorer > Tools > Internet Options > Advanced tab > scroll down to Security (near the bottom). Uncheck these two (2) items unless you intentionally set them:
Allow active content from CDs to run on My Computer
Allow active content to run in files on My Computer

if that dont work then try this

In that case see this post by Viral (http://forums.spybot...ber.php?u=10921) in the same thread:
IE oddity
http://forums.spybot...mp;postcount=27
They claim that by checking and applying the first three (3) items under Security and then un-checking them and applying again solved the problem.

and the last part you need to get spybot to ignore this

HKEY_USERS\S-1-5-21-1065397860-3967216430-2567981340-1005\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\iexplore.exe!=W=1


You can also exclude it from the search.
You can exclude a product from the search as follows:
First of all procede a scan with Spybot - Search & Destroy. Now, mark the item, you want to exclude from the search, with a left-click.
It is marked blue now. Then right-click this entry and select "exclude this product from further searches".

It is also possible to exclude it before the search. Please run Spybot - Search & Destroy in "Advanced Mode" and go to "Settings" -> "Ignore products". There you can tick the checkbox in front of the product you want to exclude from the search.

quite possibly the last thing that couldve happen is norton has disabled windows security makes me wonder

do all of those things but make a back up of registry

if the problem is still there then go to the malware forum a malware expert who knows more about registry can be more of assistances

Edited by rushin1nd, 05 December 2006 - 05:09 PM.