Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works

Something has taken over my PC's

  • Please log in to reply



    New Member

  • Member
  • Pip
  • 1 posts
I have three networked Dell Optiplex 265 desktops hardwired, running XP Pro with two Dell Latitude D800 laptops connecting wirelessly to the network server which is also Dell Optiplex 265. The server software is this Open source stuff my computer guys put on, so far so good. But, I am still plagued by the same problems I've had for over a year with this system. Intermittent connectivity, both to the network and internet. Programs mysteriously disappearing of being shut off, real whacky behavior. Up until now I've had no answers, one of my computers makes about 7 or 8 copies of whatever you put on it. If you create a Word.doc, now you have 8, 16, and 32 and so on. Here's the log from my laptop. When I started this email it was the only one able to connect to the net...now they are all mysteriously running fine again, go figure.
StartupList report, 4/10/2005, 8:32:41 PM
StartupList version: 1.52.2
Started from : C:\Documents and Settings\pulley\Desktop\HijackThis-1.EXE
Detected: Windows XP SP2 (WinNT 5.01.2600)
Detected: Internet Explorer v6.00 SP2 (6.00.2900.2180)
* Using default options

Running processes:

C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus for Workstation 5\kavmm.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus for Workstation 5\kwsprod.exe
C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\Playlist.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Sony Corporation\Image Transfer\SonyTray.exe
C:\Program Files\Common Files\Adobe\Web\AOM.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\pulley\Desktop\HijackThis-1.exe


Listing of startup folders:

Shell folders Common Startup:
[C:\Documents and Settings\All Users\Start Menu\Programs\Startup]
Image Transfer.lnk = ?


Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,


Autorun entries from Registry:

NvCplDaemon = RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
KAV50 = "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus for Workstation 5\kwsprod.exe" -run -n Workstation -v -chkss
ZCfgSvc.exe = C:\WINDOWS\System32\ZCfgSvc.exe
vptray = C:\PROGRA~1\SYMANT~1\SYMANT~2\\vptray.exe
UserFaultCheck = %systemroot%\system32\dumprep 0 -u
RoxioAudioCentral = "C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe"
QuickTime Task = "C:\Program Files\QuickTime\qttask.exe" -atboottime
Picasa Media Detector = C:\Program Files\Picasa2\PicasaMediaDetector.exe
MsmqIntCert = regsvr32 /s mqrt.dll
SpybotSnD = "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck /autofix /autoclose /waitstart /waitmore /waitprograms
AVSCHED32 = C:\Program Files\AVPersonal\AVSched32.EXE /min
MSConfig = C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto


Autorun entries from Registry:

SpybotSD TeaTimer = C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
ctfmon.exe = C:\WINDOWS\system32\ctfmon.exe
MSMSGS = "C:\Program Files\Messenger\msmsgs.exe" /background


Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry key not found*
HKLM\..\Policies: Shell=*Registry value not found*


Enumerating Browser Helper Objects:

(no name) - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll - {02478D38-C3F9-4efb-9B51-7695ECA05670}
(no name) - C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
(no name) - C:\PROGRA~1\SPYBOT~1\SDHelper.dll - {53707962-6F74-2D53-2644-206D7942484F}
(no name) - c:\program files\google\googletoolbar1.dll - {AA58ED58-01DD-4d91-8333-CF10577473F7}


Enumerating Task Scheduler jobs:

1-Click Maintenance.job


Enumerating Download Program Files:

[Microsoft Office Template and Media Control]
CODEBASE = http://office.micros...tes/ieawsdc.cab

[Shockwave ActiveX Control]
InProcServer32 = C:\WINDOWS\system32\Macromed\Director\SwDir.dll
CODEBASE = http://fpdownload.ma...director/sw.cab

InProcServer32 = C:\WINDOWS\Downloaded Program Files\alaWeb.dll
CODEBASE = file://Z:\Content\cabs\alaWeb.CAB

[YInstStarter Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\yinsthelper.dll
CODEBASE = http://us.dl1.yimg.c...nst20040510.cab

[Cacher Class]
InProcServer32 = C:\WINDOWS\DOWNLO~1\xmlcache.dll
CODEBASE = http://www.rmlsweb.c...ch/XMLCache.CAB

[Office Update Installation Engine]
InProcServer32 = C:\WINDOWS\opuc.dll
CODEBASE = http://office.micros...ntent/opuc2.cab

[ActiveScan Installer Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\asinst.dll
CODEBASE = http://www.pandasoft.../as5/asinst.cab

[InstallShield Setup Player 2K2]
CODEBASE = http://www.zooware.c...ntrol/setup.exe

InProcServer32 = C:\WINDOWS\Downloaded Program Files\SystemChecker.ocx
CODEBASE = http://wvmls.fnismls...stemChecker.cab

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\system32\macromed\flash\Flash.ocx
CODEBASE = http://download.macr...ash/swflash.cab

[VersionInfo Class]
InProcServer32 = C:\WINDOWS\system32\InstallCenterClient.dll
CODEBASE = http://www.zooware.c...enterclient.cab


Enumerating ShellServiceObjectDelayLoad items:

PostBootReminder: C:\WINDOWS\system32\SHELL32.dll
CDBurn: C:\WINDOWS\system32\SHELL32.dll
WebCheck: C:\WINDOWS\System32\webcheck.dll
SysTray: C:\WINDOWS\System32\stobject.dll
UPnPMonitor: C:\WINDOWS\system32\upnpui.dll

End of report, 7,576 bytes
Report generated in 0.611 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

Edited by bpasinc, 11 April 2005 - 07:05 PM.

  • 0


Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP