Disabled Startup Items in System Config Utility keep reappearing

When I disable 11 Startup Items in the System Configuration Utility
(msconfig.exe) they will not stay disabled, in other words, every time
I reboot they magically reappear checked. What they have in common is
that all 11 show their Location as "Common Startup".

Searched for "Common Startup" on the hard drive, including the
registry, to see if I could disable the items from there, but can't
find "Common Startup" anywhere. In the registry I was able to delete
the items under: HKey Local Machine Software Microsoft Shared
Tools MSConfig Startupfolder, but as explained above, upon
rebooting, the same items appear again checked in the System
Configuration Utility.

Here is a screenshot of the problem to better illustrate it:
http://i66.tinypic.com/jhga6g.jpg

If anyone has any idea where "Common Startup" is on a Windows XP SP3
system, or where/how to permanently disable these items some other
way, will greatly appreciate any ideas.

Do those 11 filenames appear to anyone as coming from any one specific
program in particular, to see if they can be disabled from there?

Thanks,
George

On 24/04/2016 22:43, George wrote:
When I disable 11 Startup Items in the System Configuration Utility
(msconfig.exe) they will not stay disabled, in other words, every time
I reboot they magically reappear checked. What they have in common is
that all 11 show their Location as "Common Startup".

Searched for "Common Startup" on the hard drive, including the
registry, to see if I could disable the items from there, but can't
find "Common Startup" anywhere. In the registry I was able to delete
the items under: HKey Local Machine Software Microsoft Shared
Tools MSConfig Startupfolder, but as explained above, upon
rebooting, the same items appear again checked in the System
Configuration Utility.

Here is a screenshot of the problem to better illustrate it:
http://i66.tinypic.com/jhga6g.jpg

If anyone has any idea where "Common Startup" is on a Windows XP SP3
system, or where/how to permanently disable these items some other
way, will greatly appreciate any ideas.

Do those 11 filenames appear to anyone as coming from any one specific
program in particular, to see if they can be disabled from there?

Thanks,
George



How are you disabling them? The correct way is to type MSConfig /all at
the command prompt (administrator login required) or in the Run box and
then you disable any startup items from there. I don't use XP so I
can't post any pictures here.



--

1. /*This post contains rich text (HTML). if you don't like it then you
can kill-filter the poster without crying like a small baby.*/
2. /*This message is best read in Mozilla Thunderbird as it uses 21st
century technology.*/

George wrote:

When I disable 11 Startup Items in the System Configuration Utility
(msconfig.exe) they will not stay disabled, in other words, every time
I reboot they magically reappear checked. What they have in common is
that all 11 show their Location as "Common Startup".

You never WHAT are the startup items? Some programs, when ran, will
reconstitute their startup entry. So you can disable it but they will
re-define it. You need something that actively monitors the startup
items and prompts you when something gets added or lets you permanently
disable a startup entry (the monitor will notice its reappearance and
then delete it again).

You showed a list of filenames for startup items but I don't know for
what programs they belong. Also, the startup location shows the files
being rooted on the drive (i.e., all those files are at the root folder
of your system drive). That is NOT where startup items should be
located so I have to wonder if they are malware (which will usually
attempt to reconstitute itself after partial deletion).

Searched for "Common Startup" on the hard drive, including the
registry, to see if I could disable the items from there, but can't
find "Common Startup" anywhere. In the registry I was able to delete
the items under: HKey Local Machine Software Microsoft Shared
Tools MSConfig Startupfolder, but as explained above, upon
rebooting, the same items appear again checked in the System
Configuration Utility.

When a program disabled (not deletes) a startup item, it has to store it
somewhere else. The somewhere else is the program's own store of
startup entries that are not included in the Windows startup. Then
later when you want to re-enable a startup item, the program moves it
out of his store back into the original location. If an item is already
in the program's startup store then that entry was already removed from
its normal startup location. Deleting it from the program's startup
store has no effect on what programs are started on Windows startup
because they were never loaded on startup while in that store location.

msconfig.exe doesn't let you delete startup entries. It only lets you
disable them. Those entries get moved into msconfig's store location
(so they don't get loaded on Windows startup). That's why you can
re-check a startup item to move it from msconfig's startup store back to
the original location for that startup item. When you reboot Windows,
you will get prompted about msconfig removing some startup items. You
have to OK that dialog to keep those items disabled (moved into
msconfig's startup store). If you don't then you are telling Windows
the disabled items were only temporary so they show up on the next
reboot.

If you want to delete startup items rather than just disable them (move
them elsewhere into a startup store) then either do the manual registry
edits or use a startup manager that lets you both delete or disable,
like SysInternals AutoRuns. There is rarely an Undo option when you
delete a startup entry so be sure you want it deleted.

Here is a screenshot of the problem to better illustrate it:
http://i66.tinypic.com/jhga6g.jpg

If anyone has any idea where "Common Startup" is on a Windows XP SP3
system, or where/how to permanently disable these items some other
way, will greatly appreciate any ideas.

I suspect "Common Startup" is the Startup folder under the All Users
profile. Your own Windows profile has a folder named Startup. A common
Startup folder would be under the All Users profile.

Do those 11 filenames appear to anyone as coming from any one specific
program in particular, to see if they can be disabled from there?

That they are all shown in the root folder of your system drive makes me
suspect they are malware. Other than folders, almost nothing (no files)
should appear in the root folder. The pathing to the file (to load on
startup) is rarely the same as the startup location (registry or startup
folder). The only exception is if someone put an actual file, like an
..exe file, in their Startup folder instead of a shortcut (link) there to
where the file actually exists.

[Default] On Sun, 24 Apr 2016 17:08:35 -0500, in
microsoft.public.windowsxp.general VanguardLH wrote:

George wrote:

When I disable 11 Startup Items in the System Configuration Utility
(msconfig.exe) they will not stay disabled, in other words, every time
I reboot they magically reappear checked. What they have in common is
that all 11 show their Location as "Common Startup".

You never WHAT are the startup items? Some programs, when ran, will
reconstitute their startup entry. So you can disable it but they will
re-define it. You need something that actively monitors the startup
items and prompts you when something gets added or lets you permanently
disable a startup entry (the monitor will notice its reappearance and
then delete it again).

It might be malware as you say, but on the point above:

A while back I came across AnVir Task Manager, that I think does that.
It says "Startup monitor: alerts on new startups, block undesired
startup programs " That's included in the free version.
The pro version for $50. I havent' had time to even check out the
free version. Anyone have an opinion of it???

Even the free version will also delay the start of startup programs, I
presume so you can get started using the computer sooner. ??

It does a lot of other things.

Compare versions http://www.anvir.com/task-manager-windows-startup.htm

http://www.anvir.com/ says 7, 8, and 10, but the google search excerpt
and http://www.anvir.com/requirements.htm say XP too.

You showed a list of filenames for startup items but I don't know for
what programs they belong. Also, the startup location shows the files
being rooted on the drive (i.e., all those files are at the root folder
of your system drive). That is NOT where startup items should be
located so I have to wonder if they are malware (which will usually
attempt to reconstitute itself after partial deletion).

Searched for "Common Startup" on the hard drive, including the
registry, to see if I could disable the items from there, but can't
find "Common Startup" anywhere. In the registry I was able to delete
the items under: HKey Local Machine Software Microsoft Shared
Tools MSConfig Startupfolder, but as explained above, upon
rebooting, the same items appear again checked in the System
Configuration Utility.

When a program disabled (not deletes) a startup item, it has to store it
somewhere else. The somewhere else is the program's own store of
startup entries that are not included in the Windows startup. Then
later when you want to re-enable a startup item, the program moves it
out of his store back into the original location. If an item is already
in the program's startup store then that entry was already removed from
its normal startup location. Deleting it from the program's startup
store has no effect on what programs are started on Windows startup
because they were never loaded on startup while in that store location.

msconfig.exe doesn't let you delete startup entries. It only lets you
disable them. Those entries get moved into msconfig's store location
(so they don't get loaded on Windows startup). That's why you can
re-check a startup item to move it from msconfig's startup store back to
the original location for that startup item. When you reboot Windows,
you will get prompted about msconfig removing some startup items. You
have to OK that dialog to keep those items disabled (moved into
msconfig's startup store). If you don't then you are telling Windows
the disabled items were only temporary so they show up on the next
reboot.

If you want to delete startup items rather than just disable them (move
them elsewhere into a startup store) then either do the manual registry
edits or use a startup manager that lets you both delete or disable,
like SysInternals AutoRuns. There is rarely an Undo option when you
delete a startup entry so be sure you want it deleted.

Here is a screenshot of the problem to better illustrate it:
http://i66.tinypic.com/jhga6g.jpg

If anyone has any idea where "Common Startup" is on a Windows XP SP3
system, or where/how to permanently disable these items some other
way, will greatly appreciate any ideas.

I suspect "Common Startup" is the Startup folder under the All Users
profile. Your own Windows profile has a folder named Startup. A common
Startup folder would be under the All Users profile.

Do those 11 filenames appear to anyone as coming from any one specific
program in particular, to see if they can be disabled from there?

That they are all shown in the root folder of your system drive makes me
suspect they are malware. Other than folders, almost nothing (no files)
should appear in the root folder. The pathing to the file (to load on
startup) is rarely the same as the startup location (registry or startup
folder). The only exception is if someone put an actual file, like an
.exe file, in their Startup folder instead of a shortcut (link) there to
where the file actually exists.

"George" wrote in message
...
When I disable 11 Startup Items in the System Configuration Utility
(msconfig.exe) they will not stay disabled, in other words, every
time I reboot they magically reappear checked. What they have in
common is that all 11 show their Location as "Common Startup".

Searched for "Common Startup" on the hard drive, including the
registry, to see if I could disable the items from there, but can't
find "Common Startup" anywhere. In the registry I was able to
delete the items under: HKey Local Machine Software Microsoft
Shared Tools MSConfig Startupfolder, but as explained above,
upon rebooting, the same items appear again checked in the System
Configuration Utility.

Here is a screenshot of the problem to better illustrate it:
http://i66.tinypic.com/jhga6g.jpg

If anyone has any idea where "Common Startup" is on a Windows XP SP3
system, or where/how to permanently disable these items some other
way, will greatly appreciate any ideas.

Do those 11 filenames appear to anyone as coming from any one
specific program in particular, to see if they can be disabled from
there?

Thanks,
George

Solved, I think. Discovered that those 11 Startup Items were all
housed in C:\Windows\PCHealth\HelpCtr\Binaries. I moved msconfig.exe
out of that folder to a newly created folder under C:\Windows, and
changed the target of the Config Utility shortcut to point to the new
folder. Now 10 of those 11 Startup items don't reappear anymore after
disabling them, leaving only msconfig itself as a Startup Item of
itself, that is, in the misconfig utility. Go figure! The mysteries
of Windows . . . :-)

George

[Default] On Mon, 25 Apr 2016 16:45:01 -0400, in
microsoft.public.windowsxp.general "George" wrote:


"George" wrote in message
...
When I disable 11 Startup Items in the System Configuration Utility
(msconfig.exe) they will not stay disabled, in other words, every
time I reboot they magically reappear checked. What they have in
common is that all 11 show their Location as "Common Startup".

Searched for "Common Startup" on the hard drive, including the
registry, to see if I could disable the items from there, but can't
find "Common Startup" anywhere. In the registry I was able to
delete the items under: HKey Local Machine Software Microsoft
Shared Tools MSConfig Startupfolder, but as explained above,
upon rebooting, the same items appear again checked in the System
Configuration Utility.

Here is a screenshot of the problem to better illustrate it:
http://i66.tinypic.com/jhga6g.jpg

If anyone has any idea where "Common Startup" is on a Windows XP SP3
system, or where/how to permanently disable these items some other
way, will greatly appreciate any ideas.

Do those 11 filenames appear to anyone as coming from any one
specific program in particular, to see if they can be disabled from
there?

Thanks,
George

Solved, I think. Discovered that those 11 Startup Items were all
housed in C:\Windows\PCHealth\HelpCtr\Binaries. I moved msconfig.exe
out of that folder to a newly created folder under C:\Windows, and
changed the target of the Config Utility shortcut to point to the new
folder. Now 10 of those 11 Startup items don't reappear anymore after
disabling them, leaving only msconfig itself as a Startup Item of
itself, that is, in the misconfig utility. Go figure! The mysteries
of Windows . . . :-)

George

Well msconfig does start every time after the entries were changed,
until it's told not to.

"Micky" wrote in message
...
[Default] On Mon, 25 Apr 2016 16:45:01 -0400, in
microsoft.public.windowsxp.general "George" wrote:


"George" wrote in message
...
When I disable 11 Startup Items in the System Configuration
Utility
(msconfig.exe) they will not stay disabled, in other words, every
time I reboot they magically reappear checked. What they have in
common is that all 11 show their Location as "Common Startup".

Searched for "Common Startup" on the hard drive, including the
registry, to see if I could disable the items from there, but
can't
find "Common Startup" anywhere. In the registry I was able to
delete the items under: HKey Local Machine Software Microsoft

Shared Tools MSConfig Startupfolder, but as explained above,
upon rebooting, the same items appear again checked in the System
Configuration Utility.

Here is a screenshot of the problem to better illustrate it:
http://i66.tinypic.com/jhga6g.jpg

If anyone has any idea where "Common Startup" is on a Windows XP
SP3
system, or where/how to permanently disable these items some other
way, will greatly appreciate any ideas.

Do those 11 filenames appear to anyone as coming from any one
specific program in particular, to see if they can be disabled
from
there?

Thanks,
George

Solved, I think. Discovered that those 11 Startup Items were all
housed in C:\Windows\PCHealth\HelpCtr\Binaries. I moved
msconfig.exe
out of that folder to a newly created folder under C:\Windows, and
changed the target of the Config Utility shortcut to point to the
new
folder. Now 10 of those 11 Startup items don't reappear anymore
after
disabling them, leaving only msconfig itself as a Startup Item of
itself, that is, in the misconfig utility. Go figure! The
mysteries
of Windows . . . :-)

George

Well msconfig does start every time after the entries were changed,
until it's told not to.


Well yes, but it had never shown up as a Startup Item of itself on the
Startup page of msconfig (of itself), as one of those 11 items. Even
now, if I disable it on the Startup page, it will reappear checked on
the next bootup. In CCleaner, under Tools Startup it's correctly
not showing at all. Like I said, the mysteries of Windows . . .

[Default] On Tue, 26 Apr 2016 08:28:11 -0400, in
microsoft.public.windowsxp.general "George" wrote:


Well msconfig does start every time after the entries were changed,
until it's told not to.


Well yes, but it had never shown up as a Startup Item of itself on the

Good point.

Startup page of msconfig (of itself), as one of those 11 items. Even
now, if I disable it on the Startup page, it will reappear checked on
the next bootup. In CCleaner, under Tools Startup it's correctly
not showing at all. Like I said, the mysteries of Windows . . .

Have you checked for poltergeists?

On Mon, 25 Apr 2016 21:45:01 +0100, George wrote:


"George" wrote in message
...
When I disable 11 Startup Items in the System Configuration Utility
(msconfig.exe) they will not stay disabled, in other words, every
time I reboot they magically reappear checked. What they have in
common is that all 11 show their Location as "Common Startup".

Searched for "Common Startup" on the hard drive, including the
registry, to see if I could disable the items from there, but can't
find "Common Startup" anywhere. In the registry I was able to
delete the items under: HKey Local Machine Software Microsoft
Shared Tools MSConfig Startupfolder, but as explained above,
upon rebooting, the same items appear again checked in the System
Configuration Utility.

Here is a screenshot of the problem to better illustrate it:
http://i66.tinypic.com/jhga6g.jpg

If anyone has any idea where "Common Startup" is on a Windows XP SP3
system, or where/how to permanently disable these items some other
way, will greatly appreciate any ideas.

Do those 11 filenames appear to anyone as coming from any one
specific program in particular, to see if they can be disabled from
there?

Thanks,
George

Solved, I think. Discovered that those 11 Startup Items were all
housed in C:\Windows\PCHealth\HelpCtr\Binaries. I moved msconfig.exe
out of that folder to a newly created folder under C:\Windows, and
changed the target of the Config Utility shortcut to point to the new
folder. Now 10 of those 11 Startup items don't reappear anymore after
disabling them, leaving only msconfig itself as a Startup Item of
itself, that is, in the misconfig utility. Go figure! The mysteries
of Windows . . . :-)

George


Try Sysinternals' Autoruns, it gives the full load of things to disable.



--
Bah, and indeed, Humbug