Windows 98 Startup Error - Geeks to Go Forums

Jump to content

Log in Register Register Malware removal guide How it works

Windows 98 Startup Error

#1 auriferous

  • Group: Member
  • Posts: 4
  • Joined: 17-May 05

Posted 17 May 2005 - 01:35 PM

My laptop gives me the following error when I try to start it up after the windows 98 splash screen

C:\>C:\essolo.com

ESS PCI Audio DOS Device Setup Utility, Version 2.11P TEST
© ESS Technology, INC., 1996 - 1998. All rights reserved.
SOLO
DMA Mode is DDMA
Current Solo PCI IRQ: 5 PCI IO Base: FCC0

Current Solo SBPro Game Settings:
SB IO=220h IRQ=5 DMA=1
MPU401 IO=330h
Game Port IO=201h

C:\>

This program cannot be run in DOS mode.

C:\>



Then it just sits there in DOS

#2 gerryf

  • Group: Retired Staff
  • Posts: 11,365
  • Joined: 18-March 05

Posted 17 May 2005 - 02:28 PM

can you load in safe mode

#3 auriferous

  • Group: Member
  • Posts: 4
  • Joined: 17-May 05

Posted 17 May 2005 - 03:23 PM

Yeah, I loaded in safe mode, deleted the essolo.com thing, and restarted now when I try to startup normally I get

C:\> This program cannot be run in DOS mode

but I can still load in safe mode.

#4 gerryf

  • Group: Retired Staff
  • Posts: 11,365
  • Joined: 18-March 05

Posted 17 May 2005 - 03:30 PM

download hijackthis and post a log from safemode

#5 auriferous

  • Group: Member
  • Posts: 4
  • Joined: 17-May 05

Posted 17 May 2005 - 03:46 PM

Logfile of HijackThis v1.99.1
Scan saved at 3:43:47 PM, on 5/17/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\EXPLORER.EXE
C:\HIJACKTHIS\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://web10.www.nexopia.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
F1 - win.ini: run=hpfsched
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\PROGRAM FILES\MSN APPS\MSN TOOLBAR\01.02.4000.1001\EN-CA\MSNTB.DLL
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\PROGRAM FILES\MSN APPS\ST\01.02.3000.1002\EN-XU\STMAIN.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\PROGRAM FILES\MSN APPS\MSN TOOLBAR\01.02.4000.1001\EN-CA\MSNTB.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [IrMon] IrMon.exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [TrackPointSrv] daemon.exe
O4 - HKLM\..\Run: [Logitech Utility] LOGI_MWX.EXE
O4 - HKLM\..\Run: [DDCM] "C:\PROGRAM FILES\WILDTANGENT\DDC\DDCMANAGER\DDCMan.exe" -Background
O4 - HKLM\..\Run: [DDCActiveMenu] "C:\PROGRAM FILES\WILDTANGENT\DDC\ACTIVEMENU\DDCACTIVEMENU.EXE" -boot
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [msnappau] "c:\program files\MSN Apps\Updater\01.02.3000.1001\en-ca\msnappau.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\SYSTEM\hpztsb06.exe
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [mdac_runonce] C:\WINDOWS\SYSTEM\runonce.exe
O4 - HKLM\..\Run: [Windows] SYSTEM.EXE
O4 - HKLM\..\Run: [Anti-Virus Update Scheduler V1.39.12R] C:\XPR.EXE
O4 - HKLM\..\Run: [REGRUN] C:\REG.EXE
O4 - HKLM\..\Run: [Media Access] C:\PROGRAM FILES\MEDIA ACCESS\MediaAccK.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\RunServices: [Windows] SYSTEM.EXE
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE" /background
O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Startup: D-Link AirPlus.lnk = C:\Program Files\D-Link AirPlus\AirPlus.exe
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zon...kr.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061...all/xscan53.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab31267.cab
O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/MediaAcc...Bridge-c139.cab

#6 gerryf

  • Group: Retired Staff
  • Posts: 11,365
  • Joined: 18-March 05

Posted 18 May 2005 - 07:21 AM

OK, not what I was looking for, but you have a poop-load of malware there.

Before you do anything about that, though, I want to you open MY COMPUTER, open C: drive and rename the following two files

autoexec.bat to autoexec.bak

config.sys to config.bak

reboot

The error should not appear, but do you have sound still?

#7 auriferous

  • Group: Member
  • Posts: 4
  • Joined: 17-May 05

Posted 19 May 2005 - 05:28 PM

The error did not appear, and there is still sounds, thanks a lot.

Now how about getting rid of the malware?
That log is from after running ad-aware

#8 gerryf

  • Group: Retired Staff
  • Posts: 11,365
  • Joined: 18-March 05

Posted 20 May 2005 - 06:17 AM

Good, the error messages were your DOS sound card drivers not loading correctly....in most cases, you should not need them since windows has it's own, but some old soundcards used them in a few instances (mainly running game is msdos boxes)

Leave the old files incase you need to refer back. As for malware

Please go to the malware forum in my signature and follow the instructions at the top....Especially the CLICK HERE .

That will give you several steps that will help you clean up 70 percent of all problems by yourself. If at the end of the process you are still having difficulty, then post a hijackthis log in THAT forum.

Share this topic:


Page 1 of 1