Malfunction with Normal Startup

[Robert Michiel]

I recently was infected with the Blaster Worm on my Windows XP computer. (I
am connected to Road Runner cable Internet service, and the Blaster worm
accessed the computer, despite having been up to date with Microsoft
patches, and despite having Network ICE firewall, and Norton Antivirus 2003,
which had been run the day prior to the problem.) The worm was removed.
However, since that time, my computer hangs up and malfunctions in the
Normal Startup Mode. It works well in the Selective Startup Mode, in which
I have removed a number of programs from the startup menu. Additionally,
when I run the computer in the Normal Startup Mode, I get an ending program
notification: "Notification WND for RNAdmin," which I think refers to the
Real Network Player. The computer is actually functional in the Selective
Startup Mode. However there must be some problem, which I would like to
fix.

I would appreciate any advice.

Thank you.

Bob Michiel

[Rick \Nutcase\ Rogers]

Hi,

You've already done half the work. Just use selective startup mode and
slowly reenable programs to load at boot until you locate the culprit.

BTW, yes, that is related to RealOne player and it should be disabled from
loading in the startup group. Check the startup tab of msconfgi (start/run).

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
http://mvp.support.microsoft.com/
Associate Expert - WinXP - Expert Zone
www.microsoft.com/windowsxp/expertzone
Win98 Help - www.rickrogers.org

"Robert Michiel" > wrote in message
...
> I recently was infected with the Blaster Worm on my Windows XP computer.
(I
> am connected to Road Runner cable Internet service, and the Blaster worm
> accessed the computer, despite having been up to date with Microsoft
> patches, and despite having Network ICE firewall, and Norton Antivirus
2003,
> which had been run the day prior to the problem.) The worm was removed.
> However, since that time, my computer hangs up and malfunctions in the
> Normal Startup Mode. It works well in the Selective Startup Mode, in
which
> I have removed a number of programs from the startup menu. Additionally,
> when I run the computer in the Normal Startup Mode, I get an ending
program
> notification: "Notification WND for RNAdmin," which I think refers to the
> Real Network Player. The computer is actually functional in the Selective
> Startup Mode. However there must be some problem, which I would like to
> fix.
>
> I would appreciate any advice.
>
> Thank you.
>
> Bob Michiel
>
>

[Robert Michiel]

Rick,

Thank you for your advice.

What is the program in the startup menu associated with RealOne Player? Are
there particular programs that seem to cause problems in the startup menu?
There are so many items in the startup menu, that I don't really know where
to start and how to methodically conduct a search for the cuprit
progam/programs. Also, once I identify a culprit, how do I revert back to
normal startup. I tried instituting normal startup with the few programs I
do have enabled, and I was not allowed to do this.

Thanks again for the help.

Bob Michiel


"Rick "Nutcase" Rogers" > wrote in message
...
> Hi,
>
> You've already done half the work. Just use selective startup mode and
> slowly reenable programs to load at boot until you locate the culprit.
>
> BTW, yes, that is related to RealOne player and it should be disabled from
> loading in the startup group. Check the startup tab of msconfgi
(start/run).
>
> --
> Best of Luck,
>
> Rick Rogers aka "Nutcase" MS-MVP - Win9x
> http://mvp.support.microsoft.com/
> Associate Expert - WinXP - Expert Zone
> www.microsoft.com/windowsxp/expertzone
> Win98 Help - www.rickrogers.org
>
> "Robert Michiel" > wrote in message
> ...
> > I recently was infected with the Blaster Worm on my Windows XP computer.
> (I
> > am connected to Road Runner cable Internet service, and the Blaster worm
> > accessed the computer, despite having been up to date with Microsoft
> > patches, and despite having Network ICE firewall, and Norton Antivirus
> 2003,
> > which had been run the day prior to the problem.) The worm was removed.
> > However, since that time, my computer hangs up and malfunctions in the
> > Normal Startup Mode. It works well in the Selective Startup Mode, in
> which
> > I have removed a number of programs from the startup menu.
Additionally,
> > when I run the computer in the Normal Startup Mode, I get an ending
> program
> > notification: "Notification WND for RNAdmin," which I think refers to
the
> > Real Network Player. The computer is actually functional in the
Selective
> > Startup Mode. However there must be some problem, which I would like to
> > fix.
> >
> > I would appreciate any advice.
> >
> > Thank you.
> >
> > Bob Michiel
> >
> >
>
>

[Doug Knox MS-MVP]

Robert,

Any time you have programs disabled in MSConfig, it will always say
"Selective Startup".

As Rick suggested, you can disable all of them, and enable them one at a
time, rebooting between changes.

Entries listed in the Startup tab are generally located in the following
places:

Start Menu, Programs, Startup (Documents and Settings\<username> folder)
Start Menu, All Users, Programs, Startup (Documents and Settings\All Users
folder)

In the Registry at:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\RunOnce
(usually they go away after being run the first time)
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run

Another location that is susceptible to viral intrusion is:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

The Shell value in the right pane should read Explorer.exe. Some virus
files will add themselves to this value so that it looks like:

Explore.exe <virus filename.exe> <virus2 filename.exe>
--
Doug Knox, MS-MVP Windows XP/ Windows Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Associate Expert
ExpertZone - http://www.microsoft.com/windowsxp/expertzone
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"Robert Michiel" > wrote in message
...
> Rick,
>
> Thank you for your advice.
>
> What is the program in the startup menu associated with RealOne Player?
Are
> there particular programs that seem to cause problems in the startup menu?
> There are so many items in the startup menu, that I don't really know
where
> to start and how to methodically conduct a search for the cuprit
> progam/programs. Also, once I identify a culprit, how do I revert back to
> normal startup. I tried instituting normal startup with the few programs
I
> do have enabled, and I was not allowed to do this.
>
> Thanks again for the help.
>
> Bob Michiel
>
>
> "Rick "Nutcase" Rogers" > wrote in message
> ...
> > Hi,
> >
> > You've already done half the work. Just use selective startup mode and
> > slowly reenable programs to load at boot until you locate the culprit.
> >
> > BTW, yes, that is related to RealOne player and it should be disabled
from
> > loading in the startup group. Check the startup tab of msconfgi
> (start/run).
> >
> > --
> > Best of Luck,
> >
> > Rick Rogers aka "Nutcase" MS-MVP - Win9x
> > http://mvp.support.microsoft.com/
> > Associate Expert - WinXP - Expert Zone
> > www.microsoft.com/windowsxp/expertzone
> > Win98 Help - www.rickrogers.org
> >
> > "Robert Michiel" > wrote in message
> > ...
> > > I recently was infected with the Blaster Worm on my Windows XP
computer.
> > (I
> > > am connected to Road Runner cable Internet service, and the Blaster
worm
> > > accessed the computer, despite having been up to date with Microsoft
> > > patches, and despite having Network ICE firewall, and Norton Antivirus
> > 2003,
> > > which had been run the day prior to the problem.) The worm was
removed.
> > > However, since that time, my computer hangs up and malfunctions in the
> > > Normal Startup Mode. It works well in the Selective Startup Mode, in
> > which
> > > I have removed a number of programs from the startup menu.
> Additionally,
> > > when I run the computer in the Normal Startup Mode, I get an ending
> > program
> > > notification: "Notification WND for RNAdmin," which I think refers to
> the
> > > Real Network Player. The computer is actually functional in the
> Selective
> > > Startup Mode. However there must be some problem, which I would like
to
> > > fix.
> > >
> > > I would appreciate any advice.
> > >
> > > Thank you.
> > >
> > > Bob Michiel
> > >
> > >
> >
> >
>
>