[kanishka]

u mean to say i should perform the activity not in safe mode but normal mode?

[Advertisements]

Did you ever compleet installation of Ewido?

If you still have the installation message for Ewido, please let it install.
Don't install rdriv, just Ewido for now.

Then post me a fresh log using HijackThis. Tell me anything odd that happens.

[g2i2r4]

Did you ever compleet installation of Ewido?

If you still have the installation message for Ewido, please let it install.
Don't install rdriv, just Ewido for now.

Then post me a fresh log using HijackThis. Tell me anything odd that happens.

[kanishka]

no i didnt installed ewidow before.

i have done that now. and the screen shot that appeared after installation that i have send u through personal mail. due to its attachment size.

and below is the log that u requested for

Logfile of HijackThis v1.99.1
Scan saved at 11:20:54 PM, on 7/11/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\AIRTEL\AIRTEL-Broadband\fts.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\AIRTEL\AIRTEL-Broadband\pppoetray.exe
C:\hjt\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.in/
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [%FP%AIRTEL fts.exe] "C:\Program Files\AIRTEL\AIRTEL-Broadband\fts.exe"
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb10.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupd...b?1117646471222
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B5BAB303-5CE4-4DCB-BCCB-591793A1B6D6}: NameServer = 202.56.215.6,202.56.230.6
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe

[g2i2r4]

Had to figure out how to downsize it, yet make it readable

Edited by g2i2r4, 11 July 2005 - 01:35 PM.

[kanishka]

ya this is the screen shot i send u.
did u ment to ask this ??

[g2i2r4]

Thanks, that's what I meant indead.

bananafanafo advised this:

First make sure to press 'finish' in this screen.

Then, visit Microsoft to download SP1a. Then reboot and post back. Let me know if that helped. It could be part of the problem we are dealing with.

Edited by g2i2r4, 11 July 2005 - 01:47 PM.

[kanishka]

to press finish where???

[g2i2r4]

In your screenshot there is an installation message. There is a button there called 'finish'. Please press it.

[kanishka]

hello.
well i went to the specified link u told me. i started the downloading of xpsp1. it took long. as it was updating the files and downloading them from net. then after it had done so its process started to run everything thing was going smothly.until the screen reached to the point that i have send u as an attachment plz c it. sinse then the window is stuck like tat. its been more tan an hr now.
when i chequed the process be going into task bar it shows the status as running and NOT as not responding.
so what shal i do leave it running as its been long enough but it has not increased.

waiting 4 ur reply.

[g2i2r4]

[kanishka]

ya that is the screen that i sent u.

but now there is a condition. my com was incidently turned off by my mom.
so now taht i have started it again. in the add remove prog it is showing that spxp1 is instaled. but the main thing is that the rdriv installation sign has not gone away its still coming. and comuter processing has also becom slow. waht shall we do now? . i have spxp2 on a cd with me shall we install that????or shall i again install spxp1 from the net?

[g2i2r4]

Press the 'finish' button on that screen.

Edited by g2i2r4, 13 July 2005 - 11:55 AM.

[kanishka]

press finish button where.

i hope u have read my last post.???

[g2i2r4]

but the main thing is that the rdriv installation sign has not gone away its still coming.

I do read your posts.
Please reboot the computer. As soon as the installation windows appears for the rdriv installtion, start the installation. Then press the finish button.

Reboot again. Let's wait with installing XP2 until this issues is resolved.

[kanishka]

ya i did so.
while installing, appeared a window saying that it need to access the internet, so in that option i clicked later and then the window appeared saying that it would look for the required stuff when i am online and then i clicked finished

then i rebooted and ther appeared no installation window this time.
but the processes r still running prety slow.