[James Smith]

I posted part of this problem in the Hijack this log area. I have fixed part of the problem I had, but still have a problem with an uninstall command in my regestry.
This command, iMeshBar Uninstall=rundll32 C:\PROGRA~1\UNINST~1.DLL,O -2, is reinserted into my regestry everytime I reboot, after removing it from the regestry.
As far as I know I never had imesh on my system ( until this happened and I put it on and uninstalled it to try and fix my problem).
What keeps puting this command back? How can I stop it?
When I boot I get the error C:\PROGRA~1\UNINST~1.DLL,O -2 can't run, then C:\PROGRA~1 can't be found.
I have ran every spyware, Virus program, clean up program I could find that looked like it might work. I guess I'm at the point of a format and a reinstall. But I just don't have the time right now.

Thank You for any help

[Advertisements]

do you still have hijackthis on your computer from your journey through the malware forum?

[dsenette]

do you still have hijackthis on your computer from your journey through the malware forum?

[James Smith]

Yes I still have HiJackthis on my system, Below is the log I just ran

-------------------------------------------------------------------------------

i didn't ask you to post that...please don't post HJT logs anywhere but the malware forum...hold your horses

Edited by dsenette, 28 July 2006 - 01:48 PM.

[dsenette]

open up hijack this and click on the config button >misc tools>

tick the first box next to "generate startuplist log" that says "list also minor sections"
then press the "generate startuplist log" > save the log and ATTACH it with your next post (please don't post the contents...attach the file)

click on "open uninstall manager" > save list > attach that list with the startup list

[James Smith]

Thank You for the help, I have attached the startup list as per your instructions

Attached Files

•  uninstall_list.txt   8.74KB   97 downloads

[dsenette]

that's just the uninstall...whatabout the startup?

[James Smith]

Please bear with me I'm trying and thank you

Attached Files

•  startuplist.txt   18.22KB   95 downloads

[dsenette]

not trying to rush you..just making sure you're not having issue with the process...sorry if i sounded rushed

[dsenette]

well..you've deffinitely got that imesh uninstaller in your startup entries...let me figure out the best way to go about getting that gone

[dsenette]

ok...

first you need to disable spysweeper

To disable Spy Sweeper:

Open it click >Options over to the left then >program options >Uncheck "load at windows startup".
Over to the left click "shields" and uncheck all there.
Uncheck "home page shield".
Uncheck 'automaticly restore default without notifiction".

after you do that open up HJT and scan your computer
put a check next to

O4 - HKLM\..\RunOnce: [iMeshBar Uninstall] rundll32 C:\PROGRA~1\UNINST~1.DLL,O -2

and press fix
now reboot see if the error comes back,

If it works out, re enable spy sweeper reboot one more time to be sure


(thanks for the hand don77)

[James Smith]

Spysweeper was the right track. I ended up uninstalling spysweeper, using Hijackthis for the fix and reinstalling Spysweeper.
Inside Spysweeper shields is an edit startup it has a long list of active and inactive statup entries, unchecking does not always work (version 5.xx). After I disabled everything everything worked fine until I reenabled spysweeper. Then I had several new startup items that had not been on my computer for awhile.
Thank You very much for the help you were right on.
Sometimes it's hard for us retired Grandpa's to get their head around these computer problems

Jim

[dsenette]

well...the help in this one goes to don...i completely forgot about spysweeper (i guess i shouldn't have dropped out of geekU eh don?) i'm glad you got things sorted