Re: Device Detected Dialog Box

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Jim Carlock (anonymous_at_localhost.com)
Date: 12/07/04 

Date: Mon, 6 Dec 2004 20:40:04 -0500

I was hoping I could figure this out...

Let me tell you what I found...

This particular key is the key that is updated when you change
the handler (the program that is activated) when the camera is
activated.

{6BDD1FC6-810F-11D0-BEC7-08002BE2092F}

Specifically:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{6BDD1FC6-810F-11D0-BEC7-08002BE2092F}

Inside that key, some enumerated devices exist there. The appear as
four-digit numbers, 0000, 0001, and so on.

Those are the devices that are hooked up to the machine...
cameras and scanners I'm thinking (maybe some other types).

If you click on the numeral, 0000 or 0001 or whatever the
case may be (as you may have one or more and they'll be
numbered sequentially), you'll see a subkey named:

FriendlyName

which will be self-explanatory. Now if you open that particular
key up (0000 or 0001 or whatever), you'll see two subkeys
listed underneath it:
DeviceData
Events

You should only be interested in the Connected Event. Click on
the + to open it and you'll see a bunch of ClassIDs for different
applications. You'll most likely see the duplicated software name
in that collection. You'll have to click on each ClassID to see
what's in them.

Last week I only had one PhotoDraw in my camera list, or
maybe I wasn't paying attention too much at the time. I dug
around to see why I now have two ClassIDs for PhotoDraw
and the ONLY thing that I came up with, is that one is using
a Short-FilePath name to access PhotoDraw, while the
other is using the full file path/name.

So if you delete one of those keys, something may or may not
stop working. I don't know. I think the duplication is occuring
because of some short filename/long filename deal. We will
have to wait for Microsoft to answer that and let us know.

For example, I see the following in one ClassID:

C:\PROGRA~1\MI1933~1\Office\PHOTODRW.EXE
/Addons:invoke:{B9817CE3-9354-11D1-820E-00A0C9138CA9}@4329 /StiDevice:%1
/StiEvent:%2

And I see the following in another:

C:\Program Files\Microsoft Office\Office\PHOTODRW.EXE
/Addons:invoke:{B9817CE3-9354-11D1-820E-00A0C9138CA9}@4329 /StiDevice:%1
/StiEvent:%2

Now, what I did was I typed in the C:\PROGRA~1\MI1933~1\
into the address bar of Explorer and it expanded the pathname to
the full pathname. That exact SHORT PATH may be slightly
different on your machine. But you should get the idea of what's
going on.

In the old days of DOS, filenames were limited to 8 characters
and a 3-digit extension. Thus, you'll see the SHORT path's
with only 8.3 digits between each slash. :-)

I think I've described this pretty well without saying anything
dumb. I'll wait for a reply and see how well I've done. I'm no
expert, and I'm learning just as you are. Heck, I shouldn't
admit that, but just in case I totally hosed something up... ;-)

Let me know if that all seems correct on your machine as
well. If you delete one of the keys, there's a good chance
that it just might reappear at some point, so be prepared
for that little surprise. We'll have to wait and see, or maybe
someone more knowledgeable that has dealt with this can
step in and make some statements.

Good luck. 

--
Jim Carlock
Post replies to newsgroup.
"frankphelps" wrote:
> Dam!  I was nearly finished with this reply when I discovered my
> session had expired and I had to sign in and start over.
> Yes, I'm using XP SP2 on an old Dell XPS t500.  I've read a lot
> about the registry but have mostly stayed away from it, realizing
> the hazards faced by a novice. Permissions seem OK. I'm the only
> user and am signed on as the administrator.
> We searched the registry for "Microsoft PictureIt!Photo" and
> found the following keys:
1.
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{GID}\DisplayName
2. HKLM\SOFTWARE\Microsoft\IE Setup\DependentComponents
3. HKLM\SOFTWARE\Microsoft\Internet Explorer\DependentComponents
4. HKLM\SOFTWARE\Microsoft\Picture It! Publishing\6.0 (4 times because of
multiple values)
5. HKLM\SOFTWARE\Microsoft\Picture It! Publishing\6.0 (5 times)
6. HKLM\SOFTWARE\Microsoft\Picture It! Publishing\6.0\Registration
7. HKLM\SOFTWARE\Microsoft\Picture It! Publishing\6.0\Setup
8. HKLM\SOFTWARE\Microsoft\Shoebox\2.0\SKUAPP
9. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\StillImage\Registered
Applications
> I did not try to include the values and data here but can if you
> wish.
> Many of these keys have other values in addition to MS PictureIt!Photo.
> In those cases would I delete only the PictureIt values?
> I also saw other instances of "MS PictureIt" without Photo addended.
> Can I safely delete those values also?
>
> This has become a very interesting and educational project.  I
> very much appreciate your help.
> Frank
"Jim Carlock" wrote:
> NOTE: I'm assuming your OS is XP. If it's not, let me know,
> because Win2K things will be just a little different.
>
> To reinstall the key, just double-click on the .reg file.
>
> Before you do that, you'll want to right click on that key
> inside regedit and look at the Permissions. You'll likely see your
> Login ID listed there, and maybe some other IDs.
>
> You'll want to make sure you are logged in with an Administrative
> account when playing around inside the registry, because things
> can be hard to fix if you're not using an Administrative account.
>
> Now, just tapping on the delete key will prompt you to delete
> the key that is highlighted. IF you DELETE the wrong thing, you
> can really mess things up, so make sure you highlight ONLY
> the key or value you want to delete. The values are the contents
> of the keys displayed on the right side of the regedit.exe.
>
> Please, before you actually delete anything, make sure you FIND
> all references. You can just tap the F3 key to find the next
> item after the first one is found.
>
> Also, refer to the key as follows:
>
> HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{uid}\DisplayName
>
> I don't know what kind of security breach happens when the
> actual UID is put on the Internet. Someone else will have to
> comment on that. That long dashed number is your UserID.
> I changed it to {uid} above.
>
> The registry editor is divided into two sides (panes/windows).
> The left side shows the keys, while the right side shows the
> values. If you want to delete a value, highlight the item on the
> right side. If you want to save an item into a .reg file, highlight
> the key on the left side, then right click and click on Export.
>
> Be extremily careful when deleting things. You do NOT want
> to accidently delete something out of the registry.
>
> I want to definitely make sure you only found one and only
> one item. When you do the search it's a progressive search
> finding one item at a time. It doesn't display all found items
> at once, you have to tap on the F3 key to find it again.
>
> Let me know if I missed something.
>
> --
> Jim Carlock
> Post replies to newsgroup.
> -----------------------
> TIP
> -----------------------
> Something you'll also find as neat is use Explorer to browse to
> the Windows folder, then create a shortcut to NotePad.exe.
>
> Then right click on the ShortCut, select copy, put the mouse into
> the address bar and type in the following:
>
> %UserProfile%\SendTo
>
> Then click on Edit and paste so you get the shortcut to notepad
> there.
>
> Now go back to where you have the .reg file saved and take a
> look at it by right clicking on it, then select SendTo, then select
> NotePad from the drop down "SendTo list". That will open any
> highlighted document up inside of NotePad and you'll find it a
> blessing.
> -----------------------
> END OF TIP
> -----------------------
>
> "frankphelps" wrote:
> Wow!  Lots of good stuff. The search turned up one item:
> HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{uid}\DisplayName
> Sure enough, in the right-hand pane was the notation "MS PictureIt!Photo".
> I have exported it to My Documents and it saved as a .reg file.  If I
> needed
> to recover that key do I just right click (in My Docs) and click "Merge"?
> So, now that we found the key, what do I do?  Just highlight it and hit
> delete???
> Frank
>
> "Jim Carlock" wrote:
>
> > If you've made it that far, then perhaps you'd like to look
> > through your registry for references to the device.
> >
> > "Microsoft Picture It! Photo"
> >
> > Click Start, Run, type in RegEdit.Exe and click the OK
> > button.
> >
> > If you've worked with the registry, then you should already
> > know that deleting and editing things can be really BAD for
> > your computer's health. :-)
> >
> > If you haven't worked with the registry before, then we all
> > start somewhere and I will state the following in case you
> > have not heard it before.
> >
> > 1) Never accidently hit the Delete key and never delete things
> > unless you know what you are doing.
> > 2) You can always right click on the registry key and export
> > the key to a .Reg file to back up the key. NOTE: It does NOT
> > back up permissions on the key though. That usually isn't too
> > much of a worry but it can be. You can look at the permissions
> > on a key by highlighting the key and clicking on Edit and then
> > on Permissions. Permissions are just lists of user names that
> > are allowed to mess with the key.
> > 3) Press F3, or Ctrl+F, or click on Edit then Find to bring up
> > the Find dialog. Make sure all three items under the textbox
> > are checked and copy and paste the line in quotes above to
> > the textbox. Take the quote marks out (") as you are not
> > looking for the quote marks, they are not needed.
> >
> > You can right click on the key and then click on:
> >
> > "Copy Key Name"
> >
> > Make sure you get a copy of each keyname and post
> > back here what you've found if you feel insecure about
> > things.
> >
> > Whatever you do, before you delete anything highlight
> > the key and click on Edit, then Export. Give file names
> > using abbreviations like:
> >
> > HKCU for HKEY_CURRENT_USER items.
> > HKLM for HKEY_LOCAL_MACHINE items.
> > HKU for HKEY_USERS items.
> > HKCR for HKEY_CLASSES_ROOT items.
> > HKCC for HKEY_CURRENT_CONFIG items.
> >
> > Here's some things about the registry, in case you don't know
> > much about it.
> >
> > HKCU (hkey_current_user) is a pointer to a subkey inside
> > HKU (hkey_users). When you change something in this key,
> > it changes the corresponding item inside of HKU (hkey_users).
> >
> > HKCR (hkey_classes_root) is a pointer to whats inside of
> > HKEY_LOCAL_MACHINE\Software\Classes. When you
> > change something inside of HKCR, you change the same item
> > inside of HKEY_LOCAL_MACHINE\Software\Classes.
> >
> > Likewise, HKCC (hkey_current_config) is a pointer to the
> > following subkey: HKEY_LOCAL_MACHINE\Config.
> > Whatever you change inside of HKCC, gets changes inside
> > of HKEY_LOCAL_MACHINE\Config.
> >
> > So what does all this mean? This means there are two root
> > keys, HKU and HKLM. The other keys just provide a
> > convenient manner in which to access things. When
> > searching through the registry, you'll only need to bother
> > with HKCU (hkey_current_user) and HKLM
> > (hkey_local_machine).
> >
> > Now, when you find the keys in the registry as listed
> > above, you'll find duplicates, because some keys are
> > just convenient ways to access things when writing
> > programs.
> >
> > Find the keys and post back here what you've found.
> >
> > Hope that helps.
> >
> > --
> > Jim Carlock
> > Post replies to newsgroup.
> >
> > "frankphelps" <frankphelps@discussions.microsoft.com> wrote in message
> > news:BBD14878-2AFF-42B0-8370-DEC14B1A413A@microsoft.com...
> > Thanks again, Jim.  That's some stuff I didn't know about.  I've
> > followed
> > your guidance and, for now, have chosen to open the "Scanner and Camera
> > Wizard" when the camera is detected.  That gets me away from the
> > irritating
> > reference to MS PictureIt and to a point that should work well for me.
> > So, thanks again, that takes care of it for now.
> > Frank
> >
> > "Jim Carlock" wrote:
> >
> > > It's been awhile since I've done this...
> > >
> > > What I do is I connect the camera to the computer to download
> > > some pictures, double-click on My Computer to open up and
> > > view the device (Kodak DC240 for me). Right-click on the
> > > device, select Properties. There's a selection there to stop the
> > > dialog from presenting itself ("Take no action").
> > >
> > > That'll get rid of the dialog.
> > >
> > > As far as the duplicate things in the dialog... I think the following
> > > might help. Copy and paste the following line into the Start Run
> > > dialog... I can't seem to figure out where the address bar is inside
> > > the XP Help system right at the moment. Maybe someone else
> > > can chime in and explain how to get XP Help to properly
> > > display a page?
> > >
> > > mk:@MSITStore:C:\WINDOWS\Help\camera.chm::/scanner_camera_event.htm
> > >
> > > I think we are pretty close.
> > >
> > > Anyone else know why the XP help system seems like it took a
> > > step backwards from the .chm files? Or know how to correct it?
> > >
> > > --
> > > Jim Carlock
> > > Post replies to newsgroup.
> > >
> > > "frankphelps" <frankphelps@discussions.microsoft.com> wrote in message
> > > news:0DD92F7E-785A-4570-8E73-D4A84C5C3EA1@microsoft.com...
> > >
> > >
> > > "Jim Carlock" wrote:
> > >
> > > > I have an even older Kodak camera. I hate that annoying
> > > > popup. I click on the cancel or put a checkmark in the
> > > > "Take no action". I prefer to double-click on "My Computer"
> > > > and then double-click on the Camera (which Windows XP
> > > > tends to RANDOMLY give a new number every couple
> > > > months - perhaps due to updates being installed, it's up to
> > > > Kodak DC... #7 now -->Windows XP BUG!).
> > > >
> > > > There's a way to stop that dialog from starting up altogether,
> > > > and I think all you need to do is to select the "Take no action"
> > > > command to get rid of the pop up altogether.
> > > >
> > > > If the "Take no action" selection isn't available, let us know
> > > > and perhaps someone will be able to suggest something a
> > > > little different.
> > > >
> > > > --
> > > > Jim Carlock
> > > > Post replies to newsgroup.
> > > >
> > > > "frankphelps" <frankphelps@discussions.microsoft.com> wrote in
> > > > message
> > > > news:05E212B3-1B3D-4DD9-AD09-43B6D0B90897@microsoft.com...
> > > > XP Home SP2, older Dell computer
> > > >
> > > > I recently uninstalled MS Picture It! 2002.  Now when I connect and
> > > > turn
> > > > on
> > > > my old Kodak DC280 digital camera, I get the "Device Connected" box
> > > > with
> > > > thse choices for "Select the program to launch for this action:"
> > > >      Microsoft Picture It! Photo
> > > >      Microsoft Picture It! Photo
> > > >      Microsoft Scanner and Camera Wizard
> > > >      Photoshop Elements
> > > > Is it possible to remove these curious and nuisance references to
> > > > Picture
> > > > It?  I'm considering a Registry Cleaner utility but I've heard bad
> > > > things
> > > > about them so I'm not yet sure I should.  I'm very much a novice
> > > > computer
> > > > user!
> > > > Also, we're apparently not allowed to paste images in these posts.
> > > > Correct?
> > > >
> > > > (Hope this works.  My first attempt at a reply)
> > > Thanks, Jim, but we appear to be talking about two different diaglog
> > > boxes.
> > > I get the one you describe when I (for example) insert a CD in a
> > > drive.
> > > It
> > > gives me a list of options including "Take No Action".
> > >  The one I get when I turn on my camera looks more like this:
> > >              Kodak DC280 Camera
> > >
> > >              Device Connected
> > >              Select program to launch for this action:
> > >                   MS Pictureit!Photo
> > >                   MS Pictureit!Photo
> > >                   MS Scanner and Camera Wizard
> > >                   Photoshop Elements
> > >
> > > Then:  always use   and    OK     and Cancel.  Also, my camera has not
> > > been
> > > renamed.  Guess our results are somewhat different!
> > >
> > > Frank
> > > >
>
>
>
Quantcast