[kingmagic]

Hi, I am new to here but I want to say this site is great~!

I updated to xp sp2 the day before yesterday and yesgterday I encounter the problem of Dr watson, but my problem is a little different that I just can't open any folder contains .wmv file, or more accurately to say, I can open those folder but I just can't point my mouse to any .wmv file, or the Dr.Watson will jump out and say it encounter error and the folder becomes not responding.

And then I get on line and find this perfect place. I followed the noticed posted by the staff step by step, anti spyware, anti virnus, use hijack to see my computer and still ,the problem is still there. At last , I just use " regsvr32 /u shmedia.dll" to disable the preview of the media file, and, bingo~!!! Dr.Waston gone~!!! so , I come and share my expierence in order to give my thanks to the great staff working here, :-).

and , I post my logfile here, is there any more problem with my coumputer? I try to learn how to read the profile through it's home page, but I am not quite sure.






Logfile of HijackThis v1.99.1
Scan saved at 15:13:23, on 2005-3-5
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
e:\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
E:\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe
C:\Documents and Settings\kingmagic\Desktop\hijackthis\HijackThis.exe

R3 - URLSearchHook: (no name) - {00D6A7E7-4A97-456f-848A-3B75BF7554D7} - (no file)
O1 - Hosts: 222.46.16.83 www.dndrpg.net
O1 - Hosts: 218.5.78.11 www.cndkc.org
O1 - Hosts: 218.6.169.101 www.mtgchina.net
O1 - Hosts: 64.91.255.87 www.dcsresearch.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Adobe\acrobat7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - F:\SPYBOT~1\SDHelper.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - E:\FlashGet\jccatch.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - E:\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - E:\FlashGet\fgiebar.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - E:\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [OfficeGuard RegChecker] "e:\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\ogrc.exe"
O4 - HKLM\..\Run: [AVPCC] "e:\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /wait
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O8 - Extra context menu item: Use as &Display Picture - C:\Program Files\IEDP2\IEDP.htm
O8 - Extra context menu item: 使用网际快车下载 - E:\FlashGet\jc_link.htm
O8 - Extra context menu item: 使用网际快车下载全部链接 - E:\FlashGet\jc_all.htm
O9 - Extra button: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - E:\ICQ\ICQ.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - E:\ICQ\ICQ.exe (file missing)
O9 - Extra button: PowerWord - {9A687CA6-D585-4947-9ED9-BE96071F5CD9} - e:\Kingsoft\Powerword 2003\XDictExB.dll
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - E:\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - E:\FlashGet\flashget.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - E:\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - E:\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: e:\e-border client\s5spi.dll
O10 - Unknown file in Winsock LSP: e:\e-border client\s5spi.dll
O10 - Unknown file in Winsock LSP: e:\e-border client\s5spi.dll
O10 - Unknown file in Winsock LSP: e:\e-border client\s5spi.dll
O10 - Unknown file in Winsock LSP: e:\e-border client\s5spi.dll
O10 - Unknown file in Winsock LSP: e:\e-border client\s5spi.dll
O10 - Unknown file in Winsock LSP: e:\e-border client\s5spi.dll
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall-bet...all/xscan60.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{F96BE783-1FA3-4539-A7D7-C97BC2606CD5}: NameServer = 202.116.64.1,202.116.64.2
O18 - Protocol: dic - {C21F5C32-F57A-4A0D-8E0A-B672691C52D0} - e:\Kingsoft\Powerword 2003\XDictExB.dll
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: KAV Monitor Service (KAVMonitorService) - Unknown owner - e:\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exe" /service (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe