Problem running setup files

[Noonien]

I have a really odd problem. I have had very spotty performance with my system lately. Many lock ups and blue screens of death. I want to reinstall windows again.

To do this, I wanted to run Partition COmmander to make a data partitiion on my single partition hard drive to save my data.

I can't for the life of me get a setup.exe file to run from my CD-ROM. I can explore, open and have it autoplay, but the second I run a setup.exe program from it, it just hangs.

I do a Ctrl-Alt-Del and see "setup" and "Winoldap" in my Close Program window. I can kill them and things seem okay at that point.

I really want to install this program so I don't lose my data, so any help is appreciated.

Thanks!

[AnnMarie]

Hi Noonien - welcome to CTH. It might be a good idea if we had a look at your startups.

Go here (http://www.spywareinfo.com/files/startuplist.zip) and download and run Startup List. It will generate a log file. Copy the log and paste it back into this thread.

[Noonien]

Thanks for looking at this. It is a real puzzler.

Anyhow..all I had running when I ran this was AOL, Outlook and notepad (and a browser window).

There seems to be a lot of crap in there. If I can safely remove anything, let me know how and I will. Amazing what gets on this computer....

Let me know your thoughts!!!

_______-

StartupList report, 2/25/03, 8:27:43 PM
StartupList version: 1.51
Started from : C:\UNZIPPED\STARTUPLIST\STARTUPLIST.EXE
Detected: Windows 98 Gold (Win9x 4.10.1998)
Detected: Internet Explorer v6.00 SP1 (6.00.2800.1106)
* Using default options
==================================================

Running processes:

C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SHUTDOWNAWARE.EXE
C:\WINDOWS\ptsnoop.exe
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\MICROSOFT HARDWARE\KEYBOARD\TYPE32.EXE
C:\PROGRAM FILES\MICROSOFT HARDWARE\MOUSE\POINT32.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\EVNTSVC.EXE
C:\WINDOWS\TASKMON.EXE
C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\WINWORD.EXE
C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\OUTLOOK.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\AMERICA ONLINE 8.0\AOL.EXE
C:\PROGRAM FILES\AMERICA ONLINE 8.0\WAOL.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\MSAGENT\AGENTSVR.EXE
D:\install\setup.exe
C:\WINDOWS\SYSTEM\WINOA386.MOD
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\UNZIPPED\STARTUPLIST\STARTUPLIST.EXE

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

ScanRegistry = C:\WINDOWS\scanregw.exe /autorun
SystemTray = SysTray.Exe
Cmaudio = RunDll32 cmicnfg.cpl,CMICtrlWnd
StillImageMonitor = C:\WINDOWS\SYSTEM\STIMON.EXE
Shutdownaware = C:\WINDOWS\Shutdownaware.exe
CriticalUpdate = C:\WINDOWS\SYSTEM\wucrtupd.exe -startup
PTSNOOP = ptsnoop.exe
IntelliType = "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
POINTER = C:\Program Files\Microsoft Hardware\Mouse\point32.exe
TkBellExe = C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe -osboot
TaskMonitor = C:\WINDOWS\taskmon.exe
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run Services

SchedulingAgent = mstask.exe

--------------------------------------------------

C:\WINDOWS\WININIT.INI listing:
(Created 24/2/2003, 20:38:38)

[rename]
nul=C:\WINDOWS\TEMP\~f1d055.tmp

--------------------------------------------------

C:\WINDOWS\WININIT.BAK listing:
(Created 23/2/2003, 22:38:58)

[Rename]
NUL=C:\WINDOWS\TEMP\wcesetup.log

--------------------------------------------------


Enumerating Browser Helper Objects:

(no name) - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
CCHelper - C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER\CCHELPER.DLL - {0CF0B8EE-6596-11D5-A98E-0003470BB48E}

--------------------------------------------------

Enumerating Task Scheduler jobs:

Tune-up Application Start.job
Windows Critical Update Notification.job

--------------------------------------------------

Enumerating Download Program Files:

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH.OCX
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

[QuickTime Object]
InProcServer32 = C:\WINDOWS\SYSTEM\QTPLUGIN.OCX
CODEBASE = http://www.apple.com/qtactivex/qtplugin.cab

[{41F17733-B041-4099-A042-B518BB6A408C}]
CODEBASE = http://a1540.g.akamai.net/7/1540/52/20020713/qtinstall.info.apple.com/samantha/us/win/QuickTimeInstaller.exe

[{BD11A280-2E73-11CF-B6CF-00AA00A74DAF}]
CODEBASE = http://www.talkingbuddy.com/talkingbuddyinstall.exe

[Update Class]
InProcServer32 = C:\WINDOWS\SYSTEM\IUCTL.DLL
CODEBASE = http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37596.5697569444

[{4E888414-DB8F-11D1-9CD9-00C04F98436A}]
CODEBASE = https://webresponse.one.microsoft.com/oas/ActiveX/winrep.cab

[OPUCatalog Class]
InProcServer32 = C:\WINDOWS\SYSTEM\OPUC.DLL
CODEBASE = http://office.microsoft.com/productupdates/content/opuc.cab

--------------------------------------------------
End of report, 4,905 bytes
Report generated in 0.596 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

[VONetwork]

Originally posted by Noonien
Thanks for looking at this. It is a real puzzler.

Anyhow..all I had running when I ran this was AOL, Outlook and notepad (and a browser window).

There seems to be a lot of crap in there. If I can safely remove anything, let me know how and I will. Amazing what gets on this computer....

Let me know your thoughts!!!

_______-

StartupList report, 2/25/03, 8:27:43 PM
StartupList version: 1.51
Started from : C:\UNZIPPED\STARTUPLIST\STARTUPLIST.EXE
Detected: Windows 98 Gold (Win9x 4.10.1998)
Detected: Internet Explorer v6.00 SP1 (6.00.2800.1106)
* Using default options
==================================================

Running processes:

C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SHUTDOWNAWARE.EXE
C:\WINDOWS\ptsnoop.exe
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\MICROSOFT HARDWARE\KEYBOARD\TYPE32.EXE
C:\PROGRAM FILES\MICROSOFT HARDWARE\MOUSE\POINT32.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\EVNTSVC.EXE
C:\WINDOWS\TASKMON.EXE
C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\WINWORD.EXE
C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\OUTLOOK.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\AMERICA ONLINE 8.0\AOL.EXE
C:\PROGRAM FILES\AMERICA ONLINE 8.0\WAOL.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\MSAGENT\AGENTSVR.EXE
D:\install\setup.exe
C:\WINDOWS\SYSTEM\WINOA386.MOD
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\UNZIPPED\STARTUPLIST\STARTUPLIST.EXE

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

ScanRegistry = C:\WINDOWS\scanregw.exe /autorun
SystemTray = SysTray.Exe
Cmaudio = RunDll32 cmicnfg.cpl,CMICtrlWnd
StillImageMonitor = C:\WINDOWS\SYSTEM\STIMON.EXE
Shutdownaware = C:\WINDOWS\Shutdownaware.exe
CriticalUpdate = C:\WINDOWS\SYSTEM\wucrtupd.exe -startup
PTSNOOP = ptsnoop.exe
IntelliType = "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
POINTER = C:\Program Files\Microsoft Hardware\Mouse\point32.exe
TkBellExe = C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe -osboot
TaskMonitor = C:\WINDOWS\taskmon.exe
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run Services

SchedulingAgent = mstask.exe

--------------------------------------------------

C:\WINDOWS\WININIT.INI listing:
(Created 24/2/2003, 20:38:38)

[rename]
nul=C:\WINDOWS\TEMP\~f1d055.tmp

--------------------------------------------------

C:\WINDOWS\WININIT.BAK listing:
(Created 23/2/2003, 22:38:58)

[Rename]
NUL=C:\WINDOWS\TEMP\wcesetup.log

--------------------------------------------------


Enumerating Browser Helper Objects:

(no name) - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
CCHelper - C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER\CCHELPER.DLL - {0CF0B8EE-6596-11D5-A98E-0003470BB48E}

--------------------------------------------------

Enumerating Task Scheduler jobs:

Tune-up Application Start.job
Windows Critical Update Notification.job

--------------------------------------------------

Enumerating Download Program Files:

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH.OCX
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

[QuickTime Object]
InProcServer32 = C:\WINDOWS\SYSTEM\QTPLUGIN.OCX
CODEBASE = http://www.apple.com/qtactivex/qtplugin.cab

[{41F17733-B041-4099-A042-B518BB6A408C}]
CODEBASE = http://a1540.g.akamai.net/7/1540/52/20020713/qtinstall.info.apple.com/samantha/us/win/QuickTimeInstaller.exe

[{BD11A280-2E73-11CF-B6CF-00AA00A74DAF}]
CODEBASE = http://www.talkingbuddy.com/talkingbuddyinstall.exe

[Update Class]
InProcServer32 = C:\WINDOWS\SYSTEM\IUCTL.DLL
CODEBASE = http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37596.5697569444

[{4E888414-DB8F-11D1-9CD9-00C04F98436A}]
CODEBASE = https://webresponse.one.microsoft.com/oas/ActiveX/winrep.cab

[OPUCatalog Class]
InProcServer32 = C:\WINDOWS\SYSTEM\OPUC.DLL
CODEBASE = http://office.microsoft.com/productupdates/content/opuc.cab

--------------------------------------------------
End of report, 4,905 bytes
Report generated in 0.596 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

Try removing line in red from startup.

[Noonien]

The line "D:/install/setup.exe" isn't in my start up list at all (msconfig) ... that is the puzzler.

I think that dump is telling you what is running on the computer.

If I am wrong, maybe someone can walk me through how to remove it from my startup...

Thanks again for the help.

[eagle]

Do you have 2 hard drives on your system? The reason I ask this it seems you have saved the setup.exe on your d drive. If I am not mistaken all items in the starup are in the programs files folder of c drive. Maybe this is why you can not access the setup.exe in your startup items in you c drive.... Not sure this helps, its getting late and Im getting older

[tb525]

This entry, D:\install\setup.exe will be removed when you remove the CD and reboot.

Is it only your Partition Commander CD that won't run?

[Noonien]

Well, I didn't figure out what the cause of the problem was, but I did a clean boot of my system (essentially a "safe mode boot" for all purposes) and was able to install and run Partition Commander.

Based on other problems I was having, I am betting that it has something to do with MS Outlook and MS Word.

Anyhow, now that I finally have an extended partition ("D" drive), I can now re-install Windows and be done with the mess that I have created over the last 6 or so months.....


Thanks for all your advice. The responses are appreciated!!

Until I have another puzzler....

Noonien

[AnnMarie]

Thats good news Noonien. Thank you for letting us know the outcome :)

[VirtualMe]

Noonien,

I have a really odd problem. I have had very spotty performance with my system lately. Many lock ups and blue screens of death. I want to reinstall windows again.

This may be what is causing a lot of your problems.

C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\EVNTSVC.EXE


Found HERE (http://www.answersthatwork.com/Tasklist_pages/tasklist_e.htm)

Evntsvc

TkBellExe Evntsvc.exe

(Real Networks) Real Networks Scheduler which gets installed with RealOne Player. Under Win9x/ME this task shows as TKBELLEXE, and as EVNTSVC under Windows 2000/XP. RNDAL elsewhere in these Task List pages is a good starting point to read about RealOne Player. Next, a 15-Jun-2002 extract from the RealOne Player License Agreement that is specific to EVNTSVC : An application Scheduler, known as "evntsvc.exe," is installed along with RealOne Player. Once installed, it runs independently of RealOne Player. The Scheduler does not collect personal information or communicate with RealNetworks’ servers. It is used to remind AutoUpdate and Message Center to perform their tasks at pre-scheduled intervals. The Scheduler is also used to automatically launch RealNetworks' Media Type Helper. The Media Type Helper ensures the system is configured for correct operation of the RealOne Player with Multi-Purpose Internet Mail Extensions ("MIME") types, file extensions, Internet protocols and other media types. If a media type has been assigned a different action by a different application, Media Type Helper may override the association and substitute its own association.

Recommendation :
If reading about RNDAL did not put you off, then read on. RealPlayer Classic used to be one of the most needed pieces of software on a PC. Its successor, RealOne Player, is vying for the title of the most hated piece of software. For a start, on many PCs EVNTSVC slows down boot-ups unacceptably, using up to 90% of CPU time at times. There have also been reports of EVNTSVC dropping advertising shortcuts onto the desktop during idle times. Next, if you try to disable EVNTSVC via Startup Manager or MSCONFIG, RealOne Player checks to see if it has been deleted from the Registry and re-instates it as a startup item ! To be fair, there is a facility within RealOne Player to "only perform automatic services while RealOne Player is in use". As stated in our write-up for RNDAL, our recommendation is to de-install RealOne Player and either use the classic RealPlayer, or something else such as WinAmp. If you absolutely want to keep RealOne Player, we suggest you rename EVNTSVC.EXE to EVNTSVC.EXE.OLD as that is the only way to make absolutely certain that it never runs, and RealOne Player works fine without it.