I could use some help with an annoying problem....

The machines we love to hate

Moderator: Wiz Feinberg

User avatar
Gary Cosden
Posts: 856
Joined: 23 Aug 2007 4:04 pm
Location: Florida, USA

I could use some help with an annoying problem....

Post by Gary Cosden »

Here is the issue:
I have a Toshiba laptop with windows 7. I regularly use Avast free anti virus and Malwarebytes. I use Secunia to keep my software up to date. Whenever I boot up the laptop here is what I see.....
Image
I can close the window and everything works as it should with no further pop ups or issues including my email client, my browsers, my AutoCad, my Cubase recording software, etc.
It's really not anything more than an annoyance but it's driving me nuts.
The problem first appeared about 6 weeks ago when I was burning a CD using Windows and for whatever reason it was unresponsive and not working right. I have burned a few CDs since then and had no issues.
Thanks for taking the time to read through this and thanks in advance for any help you may be able to offer.
Jim Priebe
Posts: 412
Joined: 2 Apr 2011 8:14 am
Location: Queensland, Australia - R.I.P.

Post by Jim Priebe »

Your computer is trying to load some file or process on startup which has been loaded on to your laptop by something you have accessed at some time - probably on the net while browsing or via your email or some update to something (lot of variables there but that's how it is).
There are utility software programs that will clean this for you (someone will chime in and suggest one that is good for the USA).

You could remove it by:
Ctrl+Alt+Del
Start task manager
search in <applications> tab for the offending thingy
A tech would probably recognise it and stop or remove it but I don't know how experienced you are in this.
It can be as simple as trying to run a *.dat file which is located in a temporary folder somewhere.
Your computer is basically asking you which software to use to run the thing as it can't find it.
It would be wise to remove it though as it could be potentially harmful (or it could be completely innocent).
Priebs GFI ('09)Short-Uni10. GFI ('96)Short-Uni SD11. ('86)JEM U12
www.steelguitardownunder.com
User avatar
Wiz Feinberg
Posts: 6113
Joined: 8 Jan 1999 1:01 am
Location: Mid-Michigan, USA

Post by Wiz Feinberg »

It looks to me as though you have somehow set a file named "gary" to try to open automatically. Since there is no program associated with "gary" file types, the "open with" dialog keeps appearing.

Maybe this file has something to do with your failed CD project and it keeps trying to load???

Anyway, you need to find out from whence it is starting up and disable it. What operating system are you running?
"Wiz" Feinberg, Moderator SGF Computers Forum
Security Consultant
Twitter: @Wizcrafts
Main web pages: Wiztunes Steel Guitar website | Wiz's Security Blog | My Webmaster Services | Wiz's Security Blog
User avatar
Peter den Hartogh
Posts: 1001
Joined: 27 Mar 2010 12:49 pm
Location: Cape Town, South Africa

Post by Peter den Hartogh »

I would just use the Search option in Windows 7 and try to find the file "Gary" on your hard drive.
If you find it and it is not an important file just "whack" it.
Just make a mental note where you found it, just in case.
Jim Priebe
Posts: 412
Joined: 2 Apr 2011 8:14 am
Location: Queensland, Australia - R.I.P.

Post by Jim Priebe »

Gary said it was a Toshiba laptop with Windows 7.
Yes, you could find and delete the offending file (good luck - the operative word there is <offending>) but deleting the process would be more final and preferably get it out of the windows registry all together. I would not recommend anyone editing the registry unless they really know what they are doing.
It appears to me that the process has got into the 'startup' area somehow.
Priebs GFI ('09)Short-Uni10. GFI ('96)Short-Uni SD11. ('86)JEM U12
www.steelguitardownunder.com
User avatar
Gary Cosden
Posts: 856
Joined: 23 Aug 2007 4:04 pm
Location: Florida, USA

Post by Gary Cosden »

My operating system is Windows 7 sp 1 64 bit. When I search for "Gary" I get a lot of files since my name is Gary. Could I find the process using task manager?
User avatar
Cal Sharp
Posts: 2874
Joined: 4 Aug 1998 11:00 pm
Location: the farm in Kornfield Kounty, TN

Post by Cal Sharp »

You might be able to narrow it down if you log in with a different account and see if it still happens.
C#
Me: Steel Guitar Madness
Latest ebook: Steel Guitar Insanity
Custom Made Covers for Steel Guitars & Amps at Sharp Covers Nashville
Dave Potter
Posts: 1565
Joined: 15 Apr 2003 12:01 am
Location: Texas

Re: I could use some help with an annoying problem....

Post by Dave Potter »

Gary Cosden wrote:Whenever I boot up the laptop here is what I see..thanks for taking the time to read through this and thanks in advance for any help you may be able to offer.
At the risk of repetition, Wiz nailed it. The computer is trying to open a file it calls "Gary" and can't. I suggest running the MSConfig utility to get familiar with everything that's running at startup and make sure you really want all of them to run then. It's entirely possible that some things may be running in the background that you never use and don't need. If so, you can simply uncheck them and they won't run in the future.

If you see things you don't recognize, Google them to find out what they are, and make a decision based on that information. You should see the "gary" file listed in the msconfig results, as well as the supposed location of that "file". You can access that location and delete whatever is there, if that's appropriate.

If the above fails to disclose the information you need, another option would be to open regedit and search for "gary", no quotes. Standard disclaimer: Improper use of the regedit utility can disable your computer. Only make changes if you understand what you're doing, and have proper backups in case of problems.
User avatar
Wiz Feinberg
Posts: 6113
Joined: 8 Jan 1999 1:01 am
Location: Mid-Michigan, USA

Post by Wiz Feinberg »

It crossed my mind today that the missing file named Gary could be auto-launching as a scheduled task (that never completed). Therefore, searching for all tasks, running or scheduled, might turn up more information.
"Wiz" Feinberg, Moderator SGF Computers Forum
Security Consultant
Twitter: @Wizcrafts
Main web pages: Wiztunes Steel Guitar website | Wiz's Security Blog | My Webmaster Services | Wiz's Security Blog
User avatar
Gary Cosden
Posts: 856
Joined: 23 Aug 2007 4:04 pm
Location: Florida, USA

Post by Gary Cosden »

Thank you all so much for your ideas. I will try some out when I can this evening and report back.
User avatar
Gary Cosden
Posts: 856
Joined: 23 Aug 2007 4:04 pm
Location: Florida, USA

Post by Gary Cosden »

I tried Cal's suggestion and in fact the window only opens up when I log in as administrator. It does not open in my guest account.
When I right click on the "open with" in task manager and chose "go to process" I get rundll32.exe shown as a "windows host process". Hope this means something to some one because it's all Greek to me.
Jim Priebe
Posts: 412
Joined: 2 Apr 2011 8:14 am
Location: Queensland, Australia - R.I.P.

Post by Jim Priebe »

Gary

Plenty of things to try there - we really are trying to solve your prob.

To use MSConfig:
In your programs list go to
Accessories>
Command Prompt>
In the dreaded DOS-like window type
MSconfig
Enter
In the <Startup> tab
Look for the 'Gary' whatever and untick it
The trick here is it may not be under the name of gary but probably is.

Gee! I feel like I'm at work with my headset on - Dejavu!

To use Task manager:
In your programs list go to
Accessories>
Command Prompt>
In the dreaded DOS-like window type
Taskmgr
enter
Ponder the list for the offender and untick

You may have to widen the column/s (called command) to see the full names.
<"go to process" I get rundll32.exe shown as a "windows host process"> is just part of the Windows engines working - kinda like pistons make the crank go round in an IC engine.

You also could create a new user and work in that profile but that won't clean anything, just avoid the message coming up.
Priebs GFI ('09)Short-Uni10. GFI ('96)Short-Uni SD11. ('86)JEM U12
www.steelguitardownunder.com
User avatar
Gary Cosden
Posts: 856
Joined: 23 Aug 2007 4:04 pm
Location: Florida, USA

Post by Gary Cosden »

I have searched all tasks, running and scheduled,MSconfig, and task manager, scrutinized all entries carefully and found nothing suspicious. I plan to go through it all again this evening just to be sure I didn't miss anything.
Dave Potter
Posts: 1565
Joined: 15 Apr 2003 12:01 am
Location: Texas

Post by Dave Potter »

Hmm. That's discouraging.

I found some fairly good info on locations of Windows startup activity at http://answers.oreilly.com/topic/1656-h ... -programs/ Might want to take a look at them.

Also ran across a utility you can download and install that apparently can show all manner of information about what's auto-starting at http://technet.microsoft.com/en-us/sysi ... 63902.aspx It might be helpful.
User avatar
Cal Sharp
Posts: 2874
Joined: 4 Aug 1998 11:00 pm
Location: the farm in Kornfield Kounty, TN

Post by Cal Sharp »

Did you try this route? Start > All Programs > Accesories > System Tools > Task Scheduler
C#
Me: Steel Guitar Madness
Latest ebook: Steel Guitar Insanity
Custom Made Covers for Steel Guitars & Amps at Sharp Covers Nashville
User avatar
Gary Cosden
Posts: 856
Joined: 23 Aug 2007 4:04 pm
Location: Florida, USA

Post by Gary Cosden »

I got to task scheduler by entering "schedule" in search.
User avatar
Gary Cosden
Posts: 856
Joined: 23 Aug 2007 4:04 pm
Location: Florida, USA

Post by Gary Cosden »

Success! And Dave Potter is today's lucky winner with the suggestion to try out the Auroruns utility. At first there was no joy and I was reduced to searching each entry on the internet. When I came to one for the Amazon Cloud Player guess what popped up on Google? Gary Indiana! I deselected that entry and for the first time in about 6 weeks had a normal start up. Thanks to everyone for focusing on my little problem and helping me out!
Dave Potter
Posts: 1565
Joined: 15 Apr 2003 12:01 am
Location: Texas

Post by Dave Potter »

Gary Cosden wrote:Success! And Dave Potter is today's lucky winner .... and for the first time in about 6 weeks had a normal start up.
Whew! Good on ya. Hope the fix is permanent. Image

If I were in your position, and I could locate that auto-start item, I'd just delete it.