Outlook Express unwanted startup

ever since installing SP2 every time I boot up outlook express starts up this
is usually unwanted as it extends boot time, but also unless I stop it it
downloads before I can startt my spamfilteter. anyone any ideas of stopping
it starting.

thanks

Famine,

Type MSCONFIG in Start, Run dialog. Click the Startup tab, and then uncheck
msimn.exe entry (if present)

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org


"Famine" wrote in message
...
ever since installing SP2 every time I boot up outlook express starts up
this
is usually unwanted as it extends boot time, but also unless I stop it it
downloads before I can startt my spamfilteter. anyone any ideas of
stopping
it starting.

thanks

msimn.exe is not in the startup, but Microsoft outlook is when this is
unchecked at bootup the system tells me the config has been changed, however
outlook express continues to load anyway.



"Ramesh, MS-MVP" wrote:

Famine,

Type MSCONFIG in Start, Run dialog. Click the Startup tab, and then uncheck
msimn.exe entry (if present)

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org


"Famine" wrote in message
...
ever since installing SP2 every time I boot up outlook express starts up
this
is usually unwanted as it extends boot time, but also unless I stop it it
downloads before I can startt my spamfilteter. anyone any ideas of
stopping
it starting.

thanks

Try this: http://www.dougknox.com/xp/utils/xp_starttrack.htm
Post the log file here, as that may reveal something.

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org


"Famine" wrote in message
...
msimn.exe is not in the startup, but Microsoft outlook is when this is
unchecked at bootup the system tells me the config has been changed,
however
outlook express continues to load anyway.



"Ramesh, MS-MVP" wrote:

Famine,

Type MSCONFIG in Start, Run dialog. Click the Startup tab, and then
uncheck
msimn.exe entry (if present)

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org


"Famine" wrote in message
...
ever since installing SP2 every time I boot up outlook express starts
up
this
is usually unwanted as it extends boot time, but also unless I stop it
it
downloads before I can startt my spamfilteter. anyone any ideas of
stopping
it starting.

thanks

Type REGEDIT in Start= Run, and find the key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run

then find the MSOut value and remove it, restart computer.

Paula Januszkiewicz

Uzytkownik "Ramesh, MS-MVP" napisal w wiadomosci
...
Try this: http://www.dougknox.com/xp/utils/xp_starttrack.htm
Post the log file here, as that may reveal something.

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org


"Famine" wrote in message
...
msimn.exe is not in the startup, but Microsoft outlook is when this is
unchecked at bootup the system tells me the config has been changed,
however
outlook express continues to load anyway.



"Ramesh, MS-MVP" wrote:

Famine,

Type MSCONFIG in Start, Run dialog. Click the Startup tab, and then
uncheck
msimn.exe entry (if present)

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org


"Famine" wrote in message
...
ever since installing SP2 every time I boot up outlook express starts
up
this
is usually unwanted as it extends boot time, but also unless I stop
it
it
downloads before I can startt my spamfilteter. anyone any ideas of
stopping
it starting.

thanks

28/04/2005 14:09:40

-- Registry --
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\RunOnce

No Items Found

-- Registry --
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run

Apoint C:\Program Files\Apoint\Apoint.exe
ATIModeChange Ati2mdxx.exe
ATIPTA C:\Program Files\ATI Technologies\ATI Control
Panel\atiptaxx.exe
HKSERV.EXE C:\Program Files\Sony\HotKey Utility\HKserv.exe
SonyPowerCfg C:\Program Files\sony\vaio power
management\SPMgr.exe
VAIO Update 2 "C:\Program Files\sony\vaio update
2\VAIOUpdt.exe" /Stationary
Hcontrol C:\WINDOWS\ATK0100\Hcontrol.exe
ISBMgr.exe C:\Program Files\Sony\ISB Utility\ISBMgr.exe
Mouse Suite 98 Daemon ICO.EXE
ezShieldProtector for Px C:\WINDOWS\System32\ezSP_Px.exe
BluetoothAuthenticationAgent rundll32.exe
irprops.cpl,,BluetoothAuthenticationAgent
Switcher.exe C:\Program Files\Sony\Wireless Switch Setting
Utility\Switcher.exe
Drag'n Drop CD+DVD C:\Program Files\drag'n drop
cd+dvd\BinFiles\DragDrop.exe /StartUp
Logitech Utility Logi_MwX.Exe
TkBellExe "C:\Program Files\Common
Files\Real\Update_OB\realsched.exe" -osboot
WildTangent CDA RUNDLL32.exe "C:\Program
Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaE ngineMain
QuickTime Task "C:\Program Files\QuickTime\qttask.exe"
-atboottime
iTunesHelper C:\Program Files\iTunes\iTunesHelper.exe
OETool "C:\Program Files\Toolbar\IExploreSkins.exe"
toolbar.dll,SetHook
TBPS C:\PROGRA~1\Toolbar\TBPS.exe
Zone Labs Client C:\Program Files\Zone
Labs\ZoneAlarm\zlclient.exe

-- Registry --
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\RunOnce

No Items Found

-- Registry --
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run

Window Washer C:\Program Files\Webroot\Washer\wwDisp.exe
MsnMsgr "C:\Program Files\MSN Messenger\MsnMsgr.Exe"
/background

-- Registry --
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\RunOnce

No Items Found

-- Start Menu - Current User --
BlueSpace NE.lnk
Microsoft Outlook.lnk

-- Start Menu - All Users --
Acrobat Assistant.lnk
Four J's Windows Front End Server ( 3.20.1a ).lnk
Microsoft Find Fast.lnk
Office Startup.lnk
WinZip Quick Pick.lnk

-- Disabled Items --
No Items Found

-- Registry - Shell Value - HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon --
Explorer.exe

-- Running Processes --
System Idle Process
System
smss.exe \SystemRoot\System32\smss.exe
csrss.exe
winlogon.exe winlogon.exe
services.exe C:\WINDOWS\system32\services.exe
lsass.exe C:\WINDOWS\system32\lsass.exe
ati2evxx.exe C:\WINDOWS\System32\Ati2evxx.exe
svchost.exe C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
ati2evxx.exe Ati2evxx.exe -Client
explorer.exe C:\WINDOWS\Explorer.EXE
spoolsv.exe C:\WINDOWS\system32\spoolsv.exe
BRSS01A.EXE brss01a.exe
Apoint.exe "C:\Program Files\Apoint\Apoint.exe"
atiptaxx.exe "C:\Program Files\ATI Technologies\ATI Control
Panel\atiptaxx.exe"
HKServ.exe "C:\Program Files\Sony\HotKey Utility\HKserv.exe"
SPMgr.exe "C:\Program Files\sony\vaio power management\SPMgr.exe"
Hcontrol.exe "C:\WINDOWS\ATK0100\Hcontrol.exe"
ISBMgr.exe "C:\Program Files\Sony\ISB Utility\ISBMgr.exe"
ico.exe "C:\WINDOWS\system32\ICO.EXE"
ezSP_Px.exe "C:\WINDOWS\System32\ezSP_Px.exe"
rundll32.exe "C:\WINDOWS\system32\rundll32.exe"
irprops.cpl,,BluetoothAuthenticationAgent
Switcher.exe "C:\Program Files\Sony\Wireless Switch Setting
Utility\Switcher.exe"
DragDrop.exe "C:\Program Files\drag'n drop
cd+dvd\BinFiles\DragDrop.exe" /StartUp
Logi_MwX.Exe "C:\WINDOWS\Logi_MwX.Exe"
realsched.exe "C:\Program Files\Common
Files\Real\Update_OB\realsched.exe" -osboot
rundll32.exe "C:\WINDOWS\system32\RUNDLL32.exe" "C:\Program
Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaE ngineMain
qttask.exe "C:\Program Files\QuickTime\qttask.exe" -atboottime
iTunesHelper.exe "C:\Program Files\iTunes\iTunesHelper.exe"
TBPS.exe "C:\PROGRA~1\Toolbar\TBPS.exe"
zlclient.exe "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
wwDisp.exe "C:\Program Files\Webroot\Washer\wwDisp.exe"
msnmsgr.exe "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
acrotray.exe "C:\Program Files\Adobe\Acrobat
6.0\Distillr\acrotray.exe"
msimn.exe "C:\Program Files\Outlook Express\msimn.exe"
wtk.exe "C:\Program Files\FourJs\cliwtk\bin\wtk.exe" -f
C:\PROGRA~1\FourJs\cliwtk\FGL2C\doserv1.tcl
FINDFAST.EXE "C:\Program Files\Microsoft Office\Office\FINDFAST.EXE"
OSA.EXE "C:\Program Files\Microsoft Office\Office\OSA.EXE" -b
WZQKPICK.EXE "C:\Program Files\WinZip\WZQKPICK.EXE"
BlueSpaceNE.exe "C:\Program Files\sony\BlueSpace\BlueSpaceNE.exe" /hide
OUTLOOK.EXE "C:\Program Files\Microsoft Office\Office\OUTLOOK.EXE"
ApntEx.exe "Apntex.exe"
HKWnd.exe "C:\Program Files\Sony\HotKey Utility\HKWnd.exe"
PIB.exe C:\PROGRA~1\Toolbar\PIB.exe
Avsynmgr.exe "C:\Program Files\Network
Associates\VirusScan\Avsynmgr.exe"
svchost.exe
radio.exe c:\PROGRA~1\Toolbar\radio.exe -Embedding
MAPISP32.EXE MAPISP32.EXE -000065800009BB1
WSG.exe c:\PROGRA~1\Toolbar\WSG.exe -Embedding
TBPSSvc.exe C:\PROGRA~1\Toolbar\TBPSSvc.exe
VSStat.exe "C:\Program Files\Network Associates\VirusScan\VsStat.exe"
vshwin32.exe "C:\Program Files\Network
Associates\VirusScan\Vshwin32.exe"
vsmon.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe -service
Avconsol.exe "C:\Program Files\Network
Associates\VirusScan\Avconsol.exe"
iPodService.exe "C:\Program Files\iPod\bin\iPodService.exe"
Mcshield.exe "C:\Program Files\Common Files\Network
Associates\McShield\Mcshield.exe"
ATKOSD.exe ATKOSD.exe
alg.exe
wisptis.exe "C:\WINDOWS\System32\wisptis.exe" -Embedding
csmenu.exe "C:\csclient\csmenu.exe"
QuarkXPress Passport"C:\Program Files\QuarkXPress Passport\QuarkXPress
Passport.exe"
iexplore.exe "C:\Program Files\Internet Explorer\iexplore.exe"
-Embedding
WINZIP32.EXE "C:\PROGRA~1\WINZIP\winzip32.exe" "C:\Documents and
Settings\TonyS\Desktop\Compaq Drivers\StartupTracker3.zip"
StartupTracker3.exe "C:\Documents and Settings\TonyS\Local
Settings\Temp\StartupTracker3.exe"
notepad.exe C:\WINDOWS\notepad.exe C:\Documents and
Settings\TonyS\My Documents\startuplog.txt
wmiprvse.exe

-- Running Services --

Name: ALG
Description: Provides support for 3rd party protocol plug-ins for Internet
Connection Sharing and the Windows Firewall.
Startup Mode: Manual
Run from: C:\WINDOWS\System32\alg.exe

Name: Ati HotKey Poller
Description:
Startup Mode: Auto
Run from: C:\WINDOWS\System32\Ati2evxx.exe

Name: AudioSrv
Description: Manages audio devices for Windows-based programs. If this
service is stopped, audio devices and effects will not function properly. If
this service is disabled, any services that explicitly depend on it will fail
to start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: AvSynMgr
Description: McAfee AVSync Manager
Startup Mode: Auto
Run from: "C:\Program Files\Network Associates\VirusScan\Avsynmgr.exe"

Name: Browser
Description: Maintains an updated list of computers on the network and
supplies this list to computers designated as browsers. If this service is
stopped, this list will not be updated or maintained. If this service is
disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: BthServ
Description:
Startup Mode: Auto
Run from: C:\WINDOWS\system32\svchost.exe -k bthsvcs

Name: CryptSvc
Description: Provides three management services: Catalog Database Service,
which confirms the signatures of Windows files; Protected Root Service, which
adds and removes Trusted Root Certification Authority certificates from this
computer; and Key Service, which helps enroll this computer for certificates.
If this service is stopped, these management services will not function
properly. If this service is disabled, any services that explicitly depend on
it will fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\svchost.exe -k netsvcs

Name: DcomLaunch
Description: Provides launch functionality for DCOM services.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\svchost -k DcomLaunch

Name: Dhcp
Description: Manages network configuration by registering and updating IP
addresses and DNS names.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: dmserver
Description: Detects and monitors new hard disk drives and sends disk volume
information to Logical Disk Manager Administrative Service for configuration.
If this service is stopped, dynamic disk status and configuration information
may become out of date. If this service is disabled, any services that
explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: Dnscache
Description: Resolves and caches Domain Name System (DNS) names for this
computer. If this service is stopped, this computer will not be able to
resolve DNS names and locate Active Directory domain controllers. If this
service is disabled, any services that explicitly depend on it will fail to
start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k NetworkService

Name: ERSvc
Description: Allows error reporting for services and applictions running in
non-standard environments.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: Eventlog
Description: Enables event log messages issued by Windows-based programs and
components to be viewed in Event Viewer. This service cannot be stopped.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\services.exe

Name: EventSystem
Description: Supports System Event Notification Service (SENS), which
provides automatic distribution of events to subscribing Component Object
Model (COM) components. If the service is stopped, SENS will close and will
not be able to provide logon and logoff notifications. If this service is
disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Manual
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: FastUserSwitchingCompatibility
Description: Provides management for applications that require assistance in
a multiple user environment.
Startup Mode: Manual
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: helpsvc
Description: Enables Help and Support Center to run on this computer. If
this service is stopped, Help and Support Center will be unavailable. If this
service is disabled, any services that explicitly depend on it will fail to
start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: iPodService
Description: iPod hardware management services
Startup Mode: Manual
Run from: C:\Program Files\iPod\bin\iPodService.exe

Name: lanmanserver
Description: Supports file, print, and named-pipe sharing over the network
for this computer. If this service is stopped, these functions will be
unavailable. If this service is disabled, any services that explicitly depend
on it will fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: lanmanworkstation
Description: Creates and maintains client network connections to remote
servers. If this service is stopped, these connections will be unavailable.
If this service is disabled, any services that explicitly depend on it will
fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: LmHosts
Description: Enables support for NetBIOS over TCP/IP (NetBT) service and
NetBIOS name resolution.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k LocalService

Name: McShield
Description: McAfee On Access Scanner
Startup Mode: Manual
Run from: "C:\Program Files\Common Files\Network
Associates\McShield\Mcshield.exe"

Name: Netman
Description: Manages objects in the Network and Dial-Up Connections folder,
in which you can view both local area network and remote connections.
Startup Mode: Manual
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: Nla
Description: Collects and stores network configuration and location
information, and notifies applications when this information changes.
Startup Mode: Manual
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: PlugPlay
Description: Enables a computer to recognize and adapt to hardware changes
with little or no user input. Stopping or disabling this service will result
in system instability.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\services.exe

Name: PolicyAgent
Description: Manages IP security policy and starts the ISAKMP/Oakley (IKE)
and the IP security driver.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\lsass.exe

Name: ProtectedStorage
Description: Provides protected storage for sensitive data, such as private
keys, to prevent access by unauthorized services, processes, or users.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\lsass.exe

Name: RasMan
Description: Creates a network connection.
Startup Mode: Manual
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: RemoteRegistry
Description: Enables remote users to modify registry settings on this
computer. If this service is stopped, the registry can be modified only by
users on this computer. If this service is disabled, any services that
explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\svchost.exe -k LocalService

Name: RpcSs
Description: Provides the endpoint mapper and other miscellaneous RPC
services.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\svchost -k rpcss

Name: SamSs
Description: Stores security information for local user accounts.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\lsass.exe

Name: Schedule
Description: Enables a user to configure and schedule automated tasks on
this computer. If this service is stopped, these tasks will not be run at
their scheduled times. If this service is disabled, any services that
explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: seclogon
Description: Enables starting processes under alternate credentials. If this
service is stopped, this type of logon access will be unavailable. If this
service is disabled, any services that explicitly depend on it will fail to
start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: SENS
Description: Tracks system events such as Windows logon, network, and power
events. Notifies COM+ Event System subscribers of these events.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\svchost.exe -k netsvcs

Name: SharedAccess
Description: Provides network address translation, addressing, name
resolution and/or intrusion prevention services for a home or small office
network.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: ShellHWDetection
Description:
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: Spooler
Description: Loads files to memory for later printing.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\spoolsv.exe

Name: srservice
Description: Performs system restore functions. To stop service, turn off
System Restore from the System Restore tab in My Computer-Properties
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: SSDPSRV
Description: Enables discovery of UPnP devices on your home network.
Startup Mode: Manual
Run from: C:\WINDOWS\System32\svchost.exe -k LocalService

Name: TapiSrv
Description: Provides Telephony API (TAPI) support for programs that control
telephony devices and IP based voice connections on the local computer and,
through the LAN, on servers that are also running the service.
Startup Mode: Manual
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: TBPSSvc
Description: This service supports and maintains WebSeach Toolbar
Startup Mode: Auto
Run from: C:\PROGRA~1\Toolbar\TBPSSvc.exe

Name: TermService
Description: Allows multiple users to be connected interactively to a
machine as well as the display of desktops and applications to remote
computers. The underpinning of Remote Desktop (including RD for
Administrators), Fast User Switching, Remote Assistance, and Terminal Server.
Startup Mode: Manual
Run from: C:\WINDOWS\System32\svchost -k DComLaunch

Name: Themes
Description: Provides user experience theme management.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: TrkWks
Description: Maintains links between NTFS files within a computer or across
computers in a network domain.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\svchost.exe -k netsvcs

Name: vsmon
Description: Monitors internet traffic and generates alerts for disallowed
access.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\ZoneLabs\vsmon.exe -service

Name: W32Time
Description: Maintains date and time synchronization on all clients and
servers in the network. If this service is stopped, date and time
synchronization will be unavailable. If this service is disabled, any
services that explicitly depend on it will fail to start.

Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: WebClient
Description: Enables Windows-based programs to create, access, and modify
Internet-based files. If this service is stopped, these functions will not be
available. If this service is disabled, any services that explicitly depend
on it will fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k LocalService

Name: winmgmt
Description: Provides a common interface and object model to access
management information about operating system, devices, applications and
services. If this service is stopped, most Windows-based software will not
function properly. If this service is disabled, any services that explicitly
depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\svchost.exe -k netsvcs

Name: wscsvc
Description: Monitors system security settings and configurations.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: wuauserv
Description: Enables the download and installation of critical Windows
updates. If the service is disabled, the operating system can be manually
updated at the Windows Update Web site.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\svchost.exe -k netsvcs

Name: WZCSVC
Description: Provides automatic configuration for the 802.11 adapters
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs


"Ramesh, MS-MVP" wrote:

Try this: http://www.dougknox.com/xp/utils/xp_starttrack.htm
Post the log file here, as that may reveal something.

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org


"Famine" wrote in message
...
msimn.exe is not in the startup, but Microsoft outlook is when this is
unchecked at bootup the system tells me the config has been changed,
however
outlook express continues to load anyway.



"Ramesh, MS-MVP" wrote:

Famine,

Type MSCONFIG in Start, Run dialog. Click the Startup tab, and then
uncheck
msimn.exe entry (if present)

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org


"Famine" wrote in message
...
ever since installing SP2 every time I boot up outlook express starts
up
this
is usually unwanted as it extends boot time, but also unless I stop it
it
downloads before I can startt my spamfilteter. anyone any ideas of
stopping
it starting.

thanks

Famine,

Not sure which of the entries triggers msimn.exe process, but there are few
malware processes in the list.

http://www.liutilities.com/products/...slibrary/TBPS/
http://www3.ca.com/securityadvisor/p...x?id=453077909

Try Trend Micro's Sysclean package (free), it's capable of eliminating
keyloggers, trojans etc. Full instructions at:

Generic Trojan / Adware Infestation Removal Procedu
http://www.claymania.com/removal-trojan-adware.html

Trend Micro Sysclean package
http://aumha.net/viewtopic.php?t=10820

The Parasite Fight - Quick Fix Protocol:
http://aumha.org/a/quickfix.php

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org


"Famine" wrote in message
...
28/04/2005 14:09:40

-- Registry --
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\RunOnce

No Items Found

-- Registry --
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run

Apoint C:\Program Files\Apoint\Apoint.exe
ATIModeChange Ati2mdxx.exe
ATIPTA C:\Program Files\ATI Technologies\ATI
Control
Panel\atiptaxx.exe
HKSERV.EXE C:\Program Files\Sony\HotKey
Utility\HKserv.exe
SonyPowerCfg C:\Program Files\sony\vaio power
management\SPMgr.exe
VAIO Update 2 "C:\Program Files\sony\vaio update
2\VAIOUpdt.exe" /Stationary
Hcontrol C:\WINDOWS\ATK0100\Hcontrol.exe
ISBMgr.exe C:\Program Files\Sony\ISB Utility\ISBMgr.exe
Mouse Suite 98 Daemon ICO.EXE
ezShieldProtector for Px C:\WINDOWS\System32\ezSP_Px.exe
BluetoothAuthenticationAgent rundll32.exe
irprops.cpl,,BluetoothAuthenticationAgent
Switcher.exe C:\Program Files\Sony\Wireless Switch
Setting
Utility\Switcher.exe
Drag'n Drop CD+DVD C:\Program Files\drag'n drop
cd+dvd\BinFiles\DragDrop.exe /StartUp
Logitech Utility Logi_MwX.Exe
TkBellExe "C:\Program Files\Common
Files\Real\Update_OB\realsched.exe" -osboot
WildTangent CDA RUNDLL32.exe "C:\Program
Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaE ngineMain
QuickTime Task "C:\Program Files\QuickTime\qttask.exe"
-atboottime
iTunesHelper C:\Program Files\iTunes\iTunesHelper.exe
OETool "C:\Program Files\Toolbar\IExploreSkins.exe"
toolbar.dll,SetHook
TBPS C:\PROGRA~1\Toolbar\TBPS.exe
Zone Labs Client C:\Program Files\Zone
Labs\ZoneAlarm\zlclient.exe

-- Registry --
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\RunOnce

No Items Found

-- Registry --
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run

Window Washer C:\Program Files\Webroot\Washer\wwDisp.exe
MsnMsgr "C:\Program Files\MSN Messenger\MsnMsgr.Exe"
/background

-- Registry --
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\RunOnce

No Items Found

-- Start Menu - Current User --
BlueSpace NE.lnk
Microsoft Outlook.lnk

-- Start Menu - All Users --
Acrobat Assistant.lnk
Four J's Windows Front End Server ( 3.20.1a ).lnk
Microsoft Find Fast.lnk
Office Startup.lnk
WinZip Quick Pick.lnk

-- Disabled Items --
No Items Found

-- Registry - Shell Value - HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon --
Explorer.exe

-- Running Processes --
System Idle Process
System
smss.exe \SystemRoot\System32\smss.exe
csrss.exe
winlogon.exe winlogon.exe
services.exe C:\WINDOWS\system32\services.exe
lsass.exe C:\WINDOWS\system32\lsass.exe
ati2evxx.exe C:\WINDOWS\System32\Ati2evxx.exe
svchost.exe C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
ati2evxx.exe Ati2evxx.exe -Client
explorer.exe C:\WINDOWS\Explorer.EXE
spoolsv.exe C:\WINDOWS\system32\spoolsv.exe
BRSS01A.EXE brss01a.exe
Apoint.exe "C:\Program Files\Apoint\Apoint.exe"
atiptaxx.exe "C:\Program Files\ATI Technologies\ATI Control
Panel\atiptaxx.exe"
HKServ.exe "C:\Program Files\Sony\HotKey Utility\HKserv.exe"
SPMgr.exe "C:\Program Files\sony\vaio power
management\SPMgr.exe"
Hcontrol.exe "C:\WINDOWS\ATK0100\Hcontrol.exe"
ISBMgr.exe "C:\Program Files\Sony\ISB Utility\ISBMgr.exe"
ico.exe "C:\WINDOWS\system32\ICO.EXE"
ezSP_Px.exe "C:\WINDOWS\System32\ezSP_Px.exe"
rundll32.exe "C:\WINDOWS\system32\rundll32.exe"
irprops.cpl,,BluetoothAuthenticationAgent
Switcher.exe "C:\Program Files\Sony\Wireless Switch Setting
Utility\Switcher.exe"
DragDrop.exe "C:\Program Files\drag'n drop
cd+dvd\BinFiles\DragDrop.exe" /StartUp
Logi_MwX.Exe "C:\WINDOWS\Logi_MwX.Exe"
realsched.exe "C:\Program Files\Common
Files\Real\Update_OB\realsched.exe" -osboot
rundll32.exe "C:\WINDOWS\system32\RUNDLL32.exe" "C:\Program
Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaE ngineMain
qttask.exe "C:\Program Files\QuickTime\qttask.exe" -atboottime
iTunesHelper.exe "C:\Program Files\iTunes\iTunesHelper.exe"
TBPS.exe "C:\PROGRA~1\Toolbar\TBPS.exe"
zlclient.exe "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
wwDisp.exe "C:\Program Files\Webroot\Washer\wwDisp.exe"
msnmsgr.exe "C:\Program Files\MSN Messenger\MsnMsgr.Exe"
/background
acrotray.exe "C:\Program Files\Adobe\Acrobat
6.0\Distillr\acrotray.exe"
msimn.exe "C:\Program Files\Outlook Express\msimn.exe"
wtk.exe "C:\Program Files\FourJs\cliwtk\bin\wtk.exe" -f
C:\PROGRA~1\FourJs\cliwtk\FGL2C\doserv1.tcl
FINDFAST.EXE "C:\Program Files\Microsoft
Office\Office\FINDFAST.EXE"
OSA.EXE "C:\Program Files\Microsoft Office\Office\OSA.EXE" -b
WZQKPICK.EXE "C:\Program Files\WinZip\WZQKPICK.EXE"
BlueSpaceNE.exe "C:\Program Files\sony\BlueSpace\BlueSpaceNE.exe"
/hide
OUTLOOK.EXE "C:\Program Files\Microsoft Office\Office\OUTLOOK.EXE"
ApntEx.exe "Apntex.exe"
HKWnd.exe "C:\Program Files\Sony\HotKey Utility\HKWnd.exe"
PIB.exe C:\PROGRA~1\Toolbar\PIB.exe
Avsynmgr.exe "C:\Program Files\Network
Associates\VirusScan\Avsynmgr.exe"
svchost.exe
radio.exe c:\PROGRA~1\Toolbar\radio.exe -Embedding
MAPISP32.EXE MAPISP32.EXE -000065800009BB1
WSG.exe c:\PROGRA~1\Toolbar\WSG.exe -Embedding
TBPSSvc.exe C:\PROGRA~1\Toolbar\TBPSSvc.exe
VSStat.exe "C:\Program Files\Network
Associates\VirusScan\VsStat.exe"
vshwin32.exe "C:\Program Files\Network
Associates\VirusScan\Vshwin32.exe"
vsmon.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe -service
Avconsol.exe "C:\Program Files\Network
Associates\VirusScan\Avconsol.exe"
iPodService.exe "C:\Program Files\iPod\bin\iPodService.exe"
Mcshield.exe "C:\Program Files\Common Files\Network
Associates\McShield\Mcshield.exe"
ATKOSD.exe ATKOSD.exe
alg.exe
wisptis.exe "C:\WINDOWS\System32\wisptis.exe" -Embedding
csmenu.exe "C:\csclient\csmenu.exe"
QuarkXPress Passport"C:\Program Files\QuarkXPress Passport\QuarkXPress
Passport.exe"
iexplore.exe "C:\Program Files\Internet Explorer\iexplore.exe"
-Embedding
WINZIP32.EXE "C:\PROGRA~1\WINZIP\winzip32.exe" "C:\Documents and
Settings\TonyS\Desktop\Compaq Drivers\StartupTracker3.zip"
StartupTracker3.exe "C:\Documents and Settings\TonyS\Local
Settings\Temp\StartupTracker3.exe"
notepad.exe C:\WINDOWS\notepad.exe C:\Documents and
Settings\TonyS\My Documents\startuplog.txt
wmiprvse.exe

-- Running Services --

Name: ALG
Description: Provides support for 3rd party protocol plug-ins for Internet
Connection Sharing and the Windows Firewall.
Startup Mode: Manual
Run from: C:\WINDOWS\System32\alg.exe

Name: Ati HotKey Poller
Description:
Startup Mode: Auto
Run from: C:\WINDOWS\System32\Ati2evxx.exe

Name: AudioSrv
Description: Manages audio devices for Windows-based programs. If this
service is stopped, audio devices and effects will not function properly.
If
this service is disabled, any services that explicitly depend on it will
fail
to start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: AvSynMgr
Description: McAfee AVSync Manager
Startup Mode: Auto
Run from: "C:\Program Files\Network Associates\VirusScan\Avsynmgr.exe"

Name: Browser
Description: Maintains an updated list of computers on the network and
supplies this list to computers designated as browsers. If this service is
stopped, this list will not be updated or maintained. If this service is
disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: BthServ
Description:
Startup Mode: Auto
Run from: C:\WINDOWS\system32\svchost.exe -k bthsvcs

Name: CryptSvc
Description: Provides three management services: Catalog Database Service,
which confirms the signatures of Windows files; Protected Root Service,
which
adds and removes Trusted Root Certification Authority certificates from
this
computer; and Key Service, which helps enroll this computer for
certificates.
If this service is stopped, these management services will not function
properly. If this service is disabled, any services that explicitly depend
on
it will fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\svchost.exe -k netsvcs

Name: DcomLaunch
Description: Provides launch functionality for DCOM services.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\svchost -k DcomLaunch

Name: Dhcp
Description: Manages network configuration by registering and updating IP
addresses and DNS names.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: dmserver
Description: Detects and monitors new hard disk drives and sends disk
volume
information to Logical Disk Manager Administrative Service for
configuration.
If this service is stopped, dynamic disk status and configuration
information
may become out of date. If this service is disabled, any services that
explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: Dnscache
Description: Resolves and caches Domain Name System (DNS) names for this
computer. If this service is stopped, this computer will not be able to
resolve DNS names and locate Active Directory domain controllers. If this
service is disabled, any services that explicitly depend on it will fail
to
start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k NetworkService

Name: ERSvc
Description: Allows error reporting for services and applictions running
in
non-standard environments.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: Eventlog
Description: Enables event log messages issued by Windows-based programs
and
components to be viewed in Event Viewer. This service cannot be stopped.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\services.exe

Name: EventSystem
Description: Supports System Event Notification Service (SENS), which
provides automatic distribution of events to subscribing Component Object
Model (COM) components. If the service is stopped, SENS will close and
will
not be able to provide logon and logoff notifications. If this service is
disabled, any services that explicitly depend on it will fail to start.
Startup Mode: Manual
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: FastUserSwitchingCompatibility
Description: Provides management for applications that require assistance
in
a multiple user environment.
Startup Mode: Manual
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: helpsvc
Description: Enables Help and Support Center to run on this computer. If
this service is stopped, Help and Support Center will be unavailable. If
this
service is disabled, any services that explicitly depend on it will fail
to
start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: iPodService
Description: iPod hardware management services
Startup Mode: Manual
Run from: C:\Program Files\iPod\bin\iPodService.exe

Name: lanmanserver
Description: Supports file, print, and named-pipe sharing over the network
for this computer. If this service is stopped, these functions will be
unavailable. If this service is disabled, any services that explicitly
depend
on it will fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: lanmanworkstation
Description: Creates and maintains client network connections to remote
servers. If this service is stopped, these connections will be
unavailable.
If this service is disabled, any services that explicitly depend on it
will
fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: LmHosts
Description: Enables support for NetBIOS over TCP/IP (NetBT) service and
NetBIOS name resolution.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k LocalService

Name: McShield
Description: McAfee On Access Scanner
Startup Mode: Manual
Run from: "C:\Program Files\Common Files\Network
Associates\McShield\Mcshield.exe"

Name: Netman
Description: Manages objects in the Network and Dial-Up Connections
folder,
in which you can view both local area network and remote connections.
Startup Mode: Manual
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: Nla
Description: Collects and stores network configuration and location
information, and notifies applications when this information changes.
Startup Mode: Manual
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: PlugPlay
Description: Enables a computer to recognize and adapt to hardware changes
with little or no user input. Stopping or disabling this service will
result
in system instability.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\services.exe

Name: PolicyAgent
Description: Manages IP security policy and starts the ISAKMP/Oakley (IKE)
and the IP security driver.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\lsass.exe

Name: ProtectedStorage
Description: Provides protected storage for sensitive data, such as
private
keys, to prevent access by unauthorized services, processes, or users.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\lsass.exe

Name: RasMan
Description: Creates a network connection.
Startup Mode: Manual
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: RemoteRegistry
Description: Enables remote users to modify registry settings on this
computer. If this service is stopped, the registry can be modified only by
users on this computer. If this service is disabled, any services that
explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\svchost.exe -k LocalService

Name: RpcSs
Description: Provides the endpoint mapper and other miscellaneous RPC
services.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\svchost -k rpcss

Name: SamSs
Description: Stores security information for local user accounts.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\lsass.exe

Name: Schedule
Description: Enables a user to configure and schedule automated tasks on
this computer. If this service is stopped, these tasks will not be run at
their scheduled times. If this service is disabled, any services that
explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: seclogon
Description: Enables starting processes under alternate credentials. If
this
service is stopped, this type of logon access will be unavailable. If this
service is disabled, any services that explicitly depend on it will fail
to
start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: SENS
Description: Tracks system events such as Windows logon, network, and
power
events. Notifies COM+ Event System subscribers of these events.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\svchost.exe -k netsvcs

Name: SharedAccess
Description: Provides network address translation, addressing, name
resolution and/or intrusion prevention services for a home or small office
network.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: ShellHWDetection
Description:
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: Spooler
Description: Loads files to memory for later printing.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\spoolsv.exe

Name: srservice
Description: Performs system restore functions. To stop service, turn off
System Restore from the System Restore tab in My Computer-Properties
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: SSDPSRV
Description: Enables discovery of UPnP devices on your home network.
Startup Mode: Manual
Run from: C:\WINDOWS\System32\svchost.exe -k LocalService

Name: TapiSrv
Description: Provides Telephony API (TAPI) support for programs that
control
telephony devices and IP based voice connections on the local computer
and,
through the LAN, on servers that are also running the service.
Startup Mode: Manual
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: TBPSSvc
Description: This service supports and maintains WebSeach Toolbar
Startup Mode: Auto
Run from: C:\PROGRA~1\Toolbar\TBPSSvc.exe

Name: TermService
Description: Allows multiple users to be connected interactively to a
machine as well as the display of desktops and applications to remote
computers. The underpinning of Remote Desktop (including RD for
Administrators), Fast User Switching, Remote Assistance, and Terminal
Server.
Startup Mode: Manual
Run from: C:\WINDOWS\System32\svchost -k DComLaunch

Name: Themes
Description: Provides user experience theme management.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: TrkWks
Description: Maintains links between NTFS files within a computer or
across
computers in a network domain.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\svchost.exe -k netsvcs

Name: vsmon
Description: Monitors internet traffic and generates alerts for disallowed
access.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\ZoneLabs\vsmon.exe -service

Name: W32Time
Description: Maintains date and time synchronization on all clients and
servers in the network. If this service is stopped, date and time
synchronization will be unavailable. If this service is disabled, any
services that explicitly depend on it will fail to start.

Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: WebClient
Description: Enables Windows-based programs to create, access, and modify
Internet-based files. If this service is stopped, these functions will not
be
available. If this service is disabled, any services that explicitly
depend
on it will fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k LocalService

Name: winmgmt
Description: Provides a common interface and object model to access
management information about operating system, devices, applications and
services. If this service is stopped, most Windows-based software will not
function properly. If this service is disabled, any services that
explicitly
depend on it will fail to start.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\svchost.exe -k netsvcs

Name: wscsvc
Description: Monitors system security settings and configurations.
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs

Name: wuauserv
Description: Enables the download and installation of critical Windows
updates. If the service is disabled, the operating system can be manually
updated at the Windows Update Web site.
Startup Mode: Auto
Run from: C:\WINDOWS\system32\svchost.exe -k netsvcs

Name: WZCSVC
Description: Provides automatic configuration for the 802.11 adapters
Startup Mode: Auto
Run from: C:\WINDOWS\System32\svchost.exe -k netsvcs


"Ramesh, MS-MVP" wrote:

Try this: http://www.dougknox.com/xp/utils/xp_starttrack.htm
Post the log file here, as that may reveal something.

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org


"Famine" wrote in message
...
msimn.exe is not in the startup, but Microsoft outlook is when this is
unchecked at bootup the system tells me the config has been changed,
however
outlook express continues to load anyway.



"Ramesh, MS-MVP" wrote:

Famine,

Type MSCONFIG in Start, Run dialog. Click the Startup tab, and then
uncheck
msimn.exe entry (if present)

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org


"Famine" wrote in message
...
ever since installing SP2 every time I boot up outlook express
starts
up
this
is usually unwanted as it extends boot time, but also unless I stop
it
it
downloads before I can startt my spamfilteter. anyone any ideas of
stopping
it starting.

thanks