Windows Seven strange start-up Problem

Just a few notes from reading your Speccy snapshot

User Variables
path:
%CommonProgramFiles%\Microsoft Shared\Windows Live

Machine Variables
Path:
C:\Program Files (x86)\AMD APP\bin\x86_64
C:\Program Files (x86)\AMD APP\bin\x86
%CommonProgramFiles%\Microsoft Shared\Windows Live
C:\Windows\system32
C:\Windows
C:\Windows\System32\Wbem
C:\Windows\System32\WindowsPowerShell\v1.0\
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static
C:\Program Files\Intel\DMIX

Two things
... first having the Windows live path statement in the user variables overrides the machine variable. This isn't causing any immediate issues, but might down the road if MS changes WL path.
... second, I see no references to SysWOW64 or Program Files. This might not be important becasue I've seen references to machines without it. It just caught my attention.

Most of this is junk that steals processing when active. The CCleanerSkipUACOpen task circumvents UAC when you launch it, so that can stay.
I always update manually so I know what goes on my system. All updater tasks EXCEPT AntiVirus can be safely removed from msconfig->startup tab and Task Scheduler if not cleared after you modify the startup tab.

OpenCandy is comsidered unwanted software that usually gets on your system as a toolbar add-on when you install a wanted piece of software. ESET Online scanner or Malwarebytes normally takes care of removing it.

SmartDefrag sounds as though it is part of Adv SysCare

AWC - don't know, but a quick Google makes it out to be part of Adv SysCare

Scheduler
2/20/2013 1:15 PM;: Scheduled Update for Ask Toolbar
2/20/2013 1:19 PM;: OpenCandyHelper
2/20/2013 1:40 PM;: GoogleUpdateTaskMachineUA
2/20/2013 1:54 PM;: Adobe Flash Player Updater
2/21/2013 8:40 AM;: GoogleUpdateTaskMachineCore
2/27/2013 6:47 AM;: RealUpgradeScheduledTaskS-1-5-21-3717573752-3641179098-1415789313-1001
AWC Startup
CCleanerSkipUACOpen
CandyHelper
RunRealUpgradeLogonTaskS-1-5-21-3717573752-3641179098-1415789313-1001
SmartDefragUpdate
SmartDefrag_Startup

Part of Adv SysCare, should go away when you uninstall AdvSysCare

datamngrui.exe
Process ID: 2024
User: grciamk3Domain: TECHPC
Path: C:\Program Files (x86)\Settings Alerter\Datamngr\datamngrUI.exe
Memory Usage: 9.34 MB
Peak Memory Usage: 11 MB

Uninstall DAEMON Tools

dtshellhlp.exe
Process ID: 3232
User: grciamk3Domain: TECHPC
Path: C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
Memory Usage: 23 MB
Peak Memory Usage: 23 MB

Uninstall MagicDisc and if a similar utiltity is needed replace with ISOMagic:Download ISOMagic Free
7-Zip works too, just not as a reader - you have to open the ISO and extract the files

magicdisc.exe
Process ID: 3532
User: grciamk3
Domain: TECHPC
Path: C:\Program Files (x86)\MagicDisc\MagicDisc.exe
Memory Usage: 8.86 MB
Peak Memory Usage: 9.31 MB

Uninstall PerfectDisk Pro - another unecessary Tune-up utility. A quick search tells me you might have paid for this one. Still, the windows defrag does it's job better than it's predecessors and the Piriform Defraggler is free and unobstruisive to a system.

pdagent.exe
Process ID: 1716User: SYSTEM
Domain: NT AUTHORITY
Path: C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
Memory Usage: 16 MB
Peak Memory Usage: 18 MB

pdagents1.exe
Process ID: 2884
User: grciamk3
Domain: TECHPC
Path: C:\Program Files\Raxco\PerfectDisk\PDAgentS1.exe
Memory Usage: 5.46 MB
Peak Memory Usage: 5.74 MB

Tango media player or Tango virus? I don't know - a quick search tells me that if it is a virus, ESET removes it. Run a full scan and search archives.
Free Online Virus Scanner | ESET

tango.exe
Process ID: 168
0User: grciamk3
Domain: TECHPCP
ath: C:\Program Files (x86)\Tango\Tango.exe
Memory Usage: 40 MB
Peak Memory Usage: 41 MB

Please don't wait on me - finish the trouble shooting tutorial and many things I might suggest will already have been completed.

When you're finished with that, then folow the next path.

The Speccy snapshot showed a few things - not too bad, just a bunch of utilities that lots of people think will help.

The only real concerning items are AdvSysCare (which you said you would or will remove) and DEAMON tools (known to cause BSODs).

@Gar: The majority of the threats are just tracking cookies that don't cause harm. They just keep track of you on the net, mostly for targeted advertising.

I can't tell if you processed the threats (quarantine/remove) from you screen shot. It sounds as though you did though when you posted that you think the issue is resolved.

Uninstall Google Toolbar if superAntiSpyware didn't already remove it.

Do you use Chrome as your browser or was it installed along with something you menat to install. You really need to pay attention (not just you, everyone) when installing stuff. Too many installs include cling-on applications, utilties or browser add-ons, that you really don't want or need on your system.

When you're done house keeping on your machine - publish a new Speccy.

---

@Greg:
Thanks - yeah, I saw the Google toolbar, but I guess my eyes hurt at that point - thanks for picking up the slack.

I was aslo going to suggest the clean boot, but that is already in the trouble shooting tutorial.

gregrocker said:

Very thorough analysis, Bill. What I also spotted is Google Toobar which is spyware and should be uninstalled. Use only the stable search box built into your browser. Of course anything Google is spyware but the toolbar is worst. You need no 3rd party toolbars or search services which are always spyware.

Run SUPERAntiSpyware.com - Downloads to dig into registry to rid these spywares, declining Trial during install, then turn it off from starting with Windows in Preferences and msconfig.

Establishing a Clean Boot is paramount, also in Troubleshooting Steps for Windows 7