Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Blue Screen & Browser Shutdown


  • Please log in to reply

#1
C110GTR

C110GTR

    Member

  • Member
  • PipPip
  • 46 posts
Hi

My computer today started playing up, I get blue screens when trying to browse the internet or it shuts down the internet browser.
It doesnt even show the page, just blank.
I'm posting this from Safe Mode.

I was also getting an error on startup

"LaunchApplication.exe Bad Image
The application or dll C:\\Windows\System32\msxml14.dll is not valid Windows image. Please check this against your installation diskette."

Windows Update yellow shield with exclamation mark logo in the task is on and if I try to install the updates the computer crashes and restarts, or if I turn the laptop off for updates to install its stuck and crashes.

Mozilla Firefox on safe mode seems to work fine with net browsing

Spybot found Microsoft.WindowsSecurityCenter_Disabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wscsvc\Start!=W=2

I click Fix selected problem but its always there whenever I do a Spybot scan.

I posted this topic in Malware dept but advised its not malware as we did not find anything

My Thread from Malware section
  • 0

Advertisements


#2
Flashoreek

Flashoreek

    Member

  • Member
  • PipPip
  • 38 posts
Do you have a program called TANKS409d.exe on your computer? That process seems to be linked to that game/program.
  • 0

#3
C110GTR

C110GTR

    Member

  • Topic Starter
  • Member
  • PipPip
  • 46 posts
I dont have that game in my laptop and searched the computer as well and nothing...

Edited by C110GTR, 21 October 2006 - 01:57 AM.

  • 0

#4
Flashoreek

Flashoreek

    Member

  • Member
  • PipPip
  • 38 posts
I looked over your registry path and this is what I found:

http://img435.images.../regeditjx3.jpg

I think that is hooked to SVCHOST that operates your computer, which is a crucial process. See if you have these in Safe Mode.

By the way, I searched the file on google and it gave me an error on it being spelt wrong. Is it msxm14.exe or msxml14.dll?

Edited by Flashoreek, 21 October 2006 - 11:35 AM.

  • 0

#5
C110GTR

C110GTR

    Member

  • Topic Starter
  • Member
  • PipPip
  • 46 posts
I dont quite understand what you're trying to tell me
I dont have any knowledge on editing registries and stuff like that

I'm very sure the error I had was msxml4.dll not exe

I havent gotten that error since I posted the topic in malware section.

3 days ago i got windows error messages saying it encountered an error
the window poped up a few times continuously.

right now no blue screen so far...
  • 0

#6
Flashoreek

Flashoreek

    Member

  • Member
  • PipPip
  • 38 posts
Alright, this is NOT any ordinary Windows .dll.

So what I want you to do is go to C:\WINDOWS\System32\msxml14.dll and delete the .dll. Please make a COPY of the .dll and put it in a safe place. Once you deleted the .dll from system32, it hopefully won't cause anymore problems.

Tell me what happens! Thanks :whistling:
  • 0

#7
C110GTR

C110GTR

    Member

  • Topic Starter
  • Member
  • PipPip
  • 46 posts
I deleted that file and I'll see if I get blue screen today and tomorrow
then i'll post back here

cheers
  • 0

#8
Guest_rushin1nd_*

Guest_rushin1nd_*
  • Guest
C:\WINDOWS\System32\msxml14.dll
this dont show


do a complete hijack from here

http://www.filehippo...oad_hijackthis/

post new hijack log for problems not infection
  • 0

#9
C110GTR

C110GTR

    Member

  • Topic Starter
  • Member
  • PipPip
  • 46 posts
New HJT log

Logfile of HijackThis v1.99.1
Scan saved at 4:55:01 PM, on 22/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\00THotkey.exe
C:\WINDOWS\system32\TFNF5.exe
C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
C:\Program Files\TOSHIBA\TOSHIBA Picture Enhancement Utility\TosPEHK.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\Program Files\TOSHIBA\Wireless Hotkey\TosHKCW.exe
C:\WINDOWS\system32\TPSMain.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Toshiba\TOSHIBA RAID\Console\Kraidman.exe
C:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe
C:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Trend Micro\Internet Security 2007\pccguide.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
C:\WINDOWS\system32\TPSBattM.exe
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32\imapi.exe
C:\Program Files\Toshiba\TOSHIBA RAID\Service\kraidsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\TRENDM~1\INTERN~2\PcCtlCom.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\TRENDM~1\INTERN~2\Tmntsrv.exe
C:\PROGRA~1\TRENDM~1\INTERN~2\TmPfw.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\PROGRA~1\TRENDM~1\INTERN~2\PcScnSrv.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\TRENDM~1\INTERN~2\tmproxy.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AnalyseThat\AnalyseThat.exe

O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [00THotkey] C:\WINDOWS\system32\00THotkey.exe
O4 - HKLM\..\Run: [000StTHK] 000StTHK.exe
O4 - HKLM\..\Run: [TFNF5] TFNF5.exe
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
O4 - HKLM\..\Run: [TOSHIBA Picture Enhancement Utility] C:\Program Files\TOSHIBA\TOSHIBA Picture Enhancement Utility\TosPEHK.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [TouchED] C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [TosHKCW.exe] "C:\Program Files\TOSHIBA\Wireless Hotkey\TosHKCW.exe"
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [TPSODDCtl] TPSODDCtl.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [Kraidman] C:\Program Files\Toshiba\TOSHIBA RAID\Console\Kraidman.exe
O4 - HKLM\..\Run: [Adobe Version Cue CS2] "C:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -onlytray
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 2007\pccguide.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: TOSHIBA RAID Service (kraidsvc) - TOSHIBA Corporation - C:\Program Files\Toshiba\TOSHIBA RAID\Service\kraidsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~2\PcCtlCom.exe
O23 - Service: Trend Micro Protection Against Spyware (PcScnSrv) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~2\PcScnSrv.exe
O23 - Service: Photoshop Elements Device Connect (PhotoshopElementsDeviceConnect) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~2\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~2\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~2\tmproxy.exe
  • 0

#10
Guest_rushin1nd_*

Guest_rushin1nd_*
  • Guest
Well you dont have homepage
your not showing any toolbars but that can be a choice

your not running a java
it usually shows up on 09 of hijack

others that dont appear are ... 01 ... 02... 03 ... 08 ...09 .... 016 ..018

----------------------------------------------------------------------------------------


go to control panel....systems.....hardware......device manager....click on + on sounds and audio

are there any yellow marks or exclamaiton marks beside them

------------------------------------------------------------------------------------------
go start right on my computer and open it .....on c drive right click and click on properties select tools then click on check now make sure both boxes are checked then click start

if a black pop appears dont be alarmed you should see a flashing white bar ..type the letter y for yes hit enter reboot

let this proccess go through 5 stages


-------------------------------------------------------------------------------------------------

if this a driver issue need to know the make and model number of your computer even the serial number would be great

Edited by rushin1nd, 22 October 2006 - 11:05 AM.

  • 0

#11
C110GTR

C110GTR

    Member

  • Topic Starter
  • Member
  • PipPip
  • 46 posts
there's no yellow exclamation marks on any of the device manager
also went through 5 stages of the check
and windows is clean
  • 0

#12
C110GTR

C110GTR

    Member

  • Topic Starter
  • Member
  • PipPip
  • 46 posts
any more ideas???
  • 0

#13
Guest_rushin1nd_*

Guest_rushin1nd_*
  • Guest
do this ctrl....alt and delete

whats your cpu usage is it high if it is what process is using so much

you have alot of programs at start up are they all neccessary

is windows automatic updates on turn it off for now

from START >>RUN>> TYPE IN msconfig UNDER THE START UP TAB DISABLE ALL BUT MAKE SURE THAT YOU DONT DISABLE YOUR INTERNET SECURITY OR YOU ANTIVIRUS PROTECTION.

RESTART

try the internet again
  • 0

#14
System101

System101

    Member

  • Member
  • PipPip
  • 51 posts
I would run a full and very complete scan using all anti virus and anti spyware you have available to you.

You also have about 60 or more processes running, this can slow your computer as well. If you know how to use the task manager, see if you can turn off some of them, this will free up some memory and allow the computer to run better.

Edited by System101, 24 October 2006 - 07:24 AM.

  • 0

#15
C110GTR

C110GTR

    Member

  • Topic Starter
  • Member
  • PipPip
  • 46 posts
I did heaps of scan from the original thread which was posted from the malware section, found nothing wrong

How do I turn off some of the processes? which ones are safe to turn off?
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP