Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Anyone see anything wrong?


  • Please log in to reply

#1
fonz

fonz

    Member

  • Member
  • PipPip
  • 13 posts
I seem to be having some problems with my PC recently. Yesterday when I went to switch it on once I got to the Log In screen and typed in my password, my wallpaper came up but no desktop. I tried logging in as a different user to no avail.
Safe MOde worked fine but after trying loads of different things as well as SpyBot, Spyware Blaster, Ad aware and anti virys checks nothing worked.
Ended up getting worse and safe mode started playing up.
Re Installed Windows but for some reason Trend Micro wont startup( Something bout system busy try again after restart) and can't get any sound ( comes up with runtime error.

Anyway heres my HiJack This Log:-

Logfile of HijackThis v1.99.1
Scan saved at 16:42:50, on 19/09/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
C:\Program Files\Microsoft Hardware\Keyboard\type32.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Block Checker\block-checker.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\Silicon Image\SiISATARaid\SATARaid.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1\mantispm.exe
C:\Program Files\Trend Micro\Internet Security\PCClient.EXE
C:\Program Files\Trend Micro\Internet Security\TMOAgent.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32Info.exe
C:\Documents and Settings\Jamie\My Documents\HiJack This\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\en-gb\msntb.dll
O2 - BHO: System Process - {C2EEB4FA-B6D6-41b9-9CFA-ABA87F862BCB} - C:\WINDOWS\system32\navshext1.dll
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [TM Outbreak Agent] "C:\Program Files\Trend Micro\Internet Security\TMOAgent.exe" /run
O4 - HKLM\..\Run: [PCClient.exe] "C:\Program Files\Trend Micro\Internet Security\PCClient.exe"
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security\pccguide.exe"
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Pro Cam
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [BlockChecker] C:\Program Files\Block Checker\block-checker.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKCU\..\Run: [SP2 Connection Patcher] "C:\Program Files\SP2 Connection Patcher\SP2ConnPatcher.exe" -n=200
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O4 - Global Startup: SATARaid.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zon...nt.cab31267.cab
O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight Class) - http://download.zone...ee/cm/ICSCM.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1122836942000
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micros...b?1124178966359
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zon...nt.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn...pdownloader.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zon...wn.cab31267.cab

ANy help will be appreciated
  • 0

Advertisements


#2
fonz

fonz

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts
Anyone?

*Edited by an Administrator

Hello! Bumping your thread will not get you helped any quicker, as we look for threads with no replies. Also, we work from oldest to newest, and currently are working on logs that have been posted three to five days ago , sometimes even older. Please be patient with us. We are working as fast as we can without compromising the integrity of our work. If you have not received help within 3 days of your original post, please make a post in this thread with a link to your topic and you will be helped right away. 3 Day No Reply?

Edited by ~Kat~, 19 September 2005 - 11:29 AM.

  • 0

#3
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,671 posts
Copy the code below into notepad and save it as lookup.bat
Set Filetype to "All files"
dir %Systemdrive%\desktop.ini /a h /s > files.txt
start notepad files.txt

Start the file by doubleclicking lookup.bat
That will open a file called files.txt. Post the content of that file.

If you encounter any of the aforementioned errors again, can you please post the exact content of the error message.
This will help us very much in our efforts to help you.

Regards,
  • 0

#4
fonz

fonz

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts
Here is the result of the files.txt program

Volume in drive C has no label.
Volume Serial Number is 3875-4CF0

Directory of C:\Documents and Settings\Administrator\Application Data

14/02/2005 16:53 62 desktop.ini
1 File(s) 62 bytes

Directory of C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch

18/09/2005 21:45 119 desktop.ini
1 File(s) 119 bytes

Directory of C:\Documents and Settings\Administrator\Favorites

15/08/2005 13:44 122 Desktop.ini
1 File(s) 122 bytes

Directory of C:\Documents and Settings\Administrator\Local Settings

19/09/2005 11:48 62 desktop.ini
1 File(s) 62 bytes

Directory of C:\Documents and Settings\Administrator\Local Settings\History

15/08/2005 13:44 113 desktop.ini
1 File(s) 113 bytes

Directory of C:\Documents and Settings\Administrator\Local Settings\History\History.IE5

14/02/2005 17:05 113 desktop.ini
1 File(s) 113 bytes

Directory of C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files

15/08/2005 13:44 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5

14/02/2005 17:05 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4T2R8L6V

15/08/2005 13:44 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4TQJ0DAV

15/08/2005 13:44 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\896B0PUZ

15/08/2005 13:44 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\KPIFOTMR

15/08/2005 13:44 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\Administrator\My Documents

15/08/2005 13:44 84 desktop.ini
1 File(s) 84 bytes

Directory of C:\Documents and Settings\Administrator\My Documents\My Music

15/08/2005 13:44 189 Desktop.ini
1 File(s) 189 bytes

Directory of C:\Documents and Settings\Administrator\My Documents\My Pictures

15/08/2005 13:44 191 Desktop.ini
1 File(s) 191 bytes

Directory of C:\Documents and Settings\Administrator\SendTo

14/02/2005 17:02 181 desktop.ini
1 File(s) 181 bytes

Directory of C:\Documents and Settings\Administrator\Start Menu

14/02/2005 16:53 62 desktop.ini
1 File(s) 62 bytes

Directory of C:\Documents and Settings\Administrator\Start Menu\Programs

18/09/2005 21:45 234 desktop.ini
1 File(s) 234 bytes

Directory of C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories

15/08/2005 13:44 542 desktop.ini
1 File(s) 542 bytes

Directory of C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Accessibility

14/02/2005 17:03 348 desktop.ini
1 File(s) 348 bytes

Directory of C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories\Entertainment

14/02/2005 17:03 84 desktop.ini
1 File(s) 84 bytes

Directory of C:\Documents and Settings\Administrator\Start Menu\Programs\Startup

14/02/2005 17:03 84 desktop.ini
1 File(s) 84 bytes

Directory of C:\Documents and Settings\All Users\Application Data

19/09/2005 13:23 62 desktop.ini
1 File(s) 62 bytes

Directory of C:\Documents and Settings\All Users\Documents

19/09/2005 13:23 127 desktop.ini
1 File(s) 127 bytes

Directory of C:\Documents and Settings\All Users\Documents\My Music

19/09/2005 13:40 496 Desktop.ini
1 File(s) 496 bytes

Directory of C:\Documents and Settings\All Users\Documents\My Music\Sample Music

19/09/2005 13:40 397 desktop.ini
1 File(s) 397 bytes

Directory of C:\Documents and Settings\All Users\Documents\My Music\Sample Playlists

24/08/2005 08:47 76 desktop.ini
1 File(s) 76 bytes

Directory of C:\Documents and Settings\All Users\Documents\My Music\Sync Playlists

19/09/2005 13:42 76 desktop.ini
1 File(s) 76 bytes

Directory of C:\Documents and Settings\All Users\Documents\My Pictures

19/09/2005 13:40 150 Desktop.ini
1 File(s) 150 bytes

Directory of C:\Documents and Settings\All Users\Documents\My Pictures\Sample Pictures

19/09/2005 13:40 42 desktop.ini
1 File(s) 42 bytes

Directory of C:\Documents and Settings\All Users\Documents\My Videos

14/02/2005 17:00 151 Desktop.ini
1 File(s) 151 bytes

Directory of C:\Documents and Settings\All Users\Start Menu

19/09/2005 13:41 294 desktop.ini
1 File(s) 294 bytes

Directory of C:\Documents and Settings\All Users\Start Menu\Programs

19/09/2005 13:40 150 desktop.ini
1 File(s) 150 bytes

Directory of C:\Documents and Settings\All Users\Start Menu\Programs\Accessories

19/09/2005 13:39 320 desktop.ini
1 File(s) 320 bytes

Directory of C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Accessibility

19/09/2005 13:39 90 desktop.ini
1 File(s) 90 bytes

Directory of C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Communications

19/09/2005 13:41 516 desktop.ini
1 File(s) 516 bytes

Directory of C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Entertainment

19/09/2005 13:39 146 desktop.ini
1 File(s) 146 bytes

Directory of C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools

19/09/2005 13:41 757 desktop.ini
1 File(s) 757 bytes

Directory of C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools

19/09/2005 13:41 545 desktop.ini
1 File(s) 545 bytes

Directory of C:\Documents and Settings\All Users\Start Menu\Programs\Games

19/09/2005 13:39 798 desktop.ini
1 File(s) 798 bytes

Directory of C:\Documents and Settings\All Users\Start Menu\Programs\Startup

19/09/2005 13:41 84 desktop.ini
1 File(s) 84 bytes

Directory of C:\Documents and Settings\Default User\Application Data

19/09/2005 13:23 62 desktop.ini
1 File(s) 62 bytes

Directory of C:\Documents and Settings\Default User\Local Settings

19/09/2005 13:23 62 desktop.ini
1 File(s) 62 bytes

Directory of C:\Documents and Settings\Default User\Local Settings\History

14/02/2005 17:05 113 desktop.ini
1 File(s) 113 bytes

Directory of C:\Documents and Settings\Default User\Local Settings\History\History.IE5

14/02/2005 17:05 113 desktop.ini
1 File(s) 113 bytes

Directory of C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files

14/02/2005 17:05 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5

14/02/2005 17:05 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\4MXAVI06

14/02/2005 17:05 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\507R1SBO

14/02/2005 17:05 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\OGH5FBQJ

14/02/2005 17:05 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\TXDDKTOQ

14/02/2005 17:05 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\Default User\SendTo

19/09/2005 13:40 181 desktop.ini
1 File(s) 181 bytes

Directory of C:\Documents and Settings\Default User\Start Menu

19/09/2005 13:23 62 desktop.ini
1 File(s) 62 bytes

Directory of C:\Documents and Settings\Default User\Start Menu\Programs

19/09/2005 13:41 206 desktop.ini
1 File(s) 206 bytes

Directory of C:\Documents and Settings\Default User\Start Menu\Programs\Accessories

19/09/2005 13:41 482 desktop.ini
1 File(s) 482 bytes

Directory of C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility

19/09/2005 13:41 348 desktop.ini
1 File(s) 348 bytes

Directory of C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Entertainment

19/09/2005 13:41 84 desktop.ini
1 File(s) 84 bytes

Directory of C:\Documents and Settings\Default User\Start Menu\Programs\Startup

19/09/2005 13:41 84 desktop.ini
1 File(s) 84 bytes

Directory of C:\Documents and Settings\Jamie\Application Data

14/02/2005 16:53 62 desktop.ini
1 File(s) 62 bytes

Directory of C:\Documents and Settings\Jamie\Application Data\Microsoft\Internet Explorer\Quick Launch

14/02/2005 17:08 119 desktop.ini
1 File(s) 119 bytes

Directory of C:\Documents and Settings\Jamie\Favorites

14/02/2005 17:08 122 Desktop.ini
1 File(s) 122 bytes

Directory of C:\Documents and Settings\Jamie\Local Settings

24/09/2005 12:24 62 desktop.ini
1 File(s) 62 bytes

Directory of C:\Documents and Settings\Jamie\Local Settings\History

14/02/2005 17:07 113 desktop.ini
1 File(s) 113 bytes

Directory of C:\Documents and Settings\Jamie\Local Settings\History\History.IE5

14/02/2005 17:05 113 desktop.ini
1 File(s) 113 bytes

Directory of C:\Documents and Settings\Jamie\Local Settings\Temporary Internet Files

14/02/2005 17:07 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\Jamie\Local Settings\Temporary Internet Files\Content.IE5

20/09/2005 11:55 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\Jamie\Local Settings\Temporary Internet Files\Content.IE5\41ER0PEV

23/09/2005 00:44 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\Jamie\Local Settings\Temporary Internet Files\Content.IE5\JBF62CGK

20/09/2005 11:55 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\Jamie\Local Settings\Temporary Internet Files\Content.IE5\KF4NO1Q3

20/09/2005 11:55 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\Jamie\Local Settings\Temporary Internet Files\Content.IE5\KLUFSXIJ

23/09/2005 00:44 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\Jamie\Local Settings\Temporary Internet Files\Content.IE5\KPAZO12V

23/09/2005 00:44 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\Jamie\Local Settings\Temporary Internet Files\Content.IE5\ODQ9Y56D

20/09/2005 11:55 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\Jamie\Local Settings\Temporary Internet Files\Content.IE5\OLMRSTUV

20/09/2005 11:55 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\Jamie\Local Settings\Temporary Internet Files\Content.IE5\WPYB49MN

23/09/2005 00:44 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\Jamie\My Documents

14/02/2005 17:08 76 desktop.ini
1 File(s) 76 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\Downloads\Phone Stuff\INF files

01/07/2005 18:24 76 Desktop.ini
1 File(s) 76 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\Downloads\Smileys\Emoticons

26/08/2003 23:48 270 desktop.ini
1 File(s) 270 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\iTunes\iTunes Music\Foo Fighters

27/02/2005 23:57 364 desktop.ini
1 File(s) 364 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\iTunes\iTunes Music\Foo Fighters\Foo Fighters

27/02/2005 23:56 348 desktop.ini
1 File(s) 348 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\iTunes\iTunes Music\Foo Fighters\The Colour and the Shape

27/02/2005 23:57 366 desktop.ini
1 File(s) 366 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\iTunes\iTunes Music\Foo Fighters\There Is Nothing Left To Lose

27/02/2005 23:57 363 desktop.ini
1 File(s) 363 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\iTunes\iTunes Music\Frank Sinatra

28/02/2005 00:23 355 desktop.ini
1 File(s) 355 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\iTunes\iTunes Music\Frank Sinatra\Celebrities...At Their Worst! Disc 2

28/02/2005 00:11 339 desktop.ini
1 File(s) 339 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\iTunes\iTunes Music\Frank Sinatra\That's Life

28/02/2005 00:23 354 desktop.ini
1 File(s) 354 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\iTunes\iTunes Music\Iron Maiden

28/02/2005 00:23 373 desktop.ini
1 File(s) 373 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\iTunes\iTunes Music\Iron Maiden\Brave New World

28/02/2005 00:23 356 desktop.ini
1 File(s) 356 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\iTunes\iTunes Music\Iron Maiden\Piece of Mind

28/02/2005 00:23 358 desktop.ini
1 File(s) 358 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\iTunes\iTunes Music\Iron Maiden\Powerslave

28/02/2005 00:23 351 desktop.ini
1 File(s) 351 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\iTunes\iTunes Music\Iron Maiden\The Number of the Beast

28/02/2005 00:23 372 desktop.ini
1 File(s) 372 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\iTunes\iTunes Music\Metallica

28/02/2005 00:23 319 desktop.ini
1 File(s) 319 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\iTunes\iTunes Music\Metallica\Metallica

28/02/2005 00:23 318 desktop.ini
1 File(s) 318 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\iTunes\iTunes Music\Robbie Williams

28/02/2005 00:23 369 desktop.ini
1 File(s) 369 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\iTunes\iTunes Music\Robbie Williams\Swing When You're Winning

28/02/2005 00:23 368 desktop.ini
1 File(s) 368 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\iTunes\iTunes Music\Robbie Williams\Swing When Your Winning

28/02/2005 00:23 368 desktop.ini
1 File(s) 368 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\iTunes\iTunes Music\The Killers

28/02/2005 00:23 344 desktop.ini
1 File(s) 344 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\iTunes\iTunes Music\The Killers\Hot Fuss

28/02/2005 00:23 343 desktop.ini
1 File(s) 343 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\iTunes\iTunes Music\The Proclaimers

28/02/2005 00:23 377 desktop.ini
1 File(s) 377 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\iTunes\iTunes Music\The Proclaimers\The Best of the Proclaimers

28/02/2005 00:23 376 desktop.ini
1 File(s) 376 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\iTunes\iTunes Music\Usher

28/02/2005 00:23 339 desktop.ini
1 File(s) 339 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\iTunes\iTunes Music\Usher\CD

28/02/2005 00:23 338 desktop.ini
1 File(s) 338 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\iTunes\iTunes Music\Various Artists

28/02/2005 00:23 328 desktop.ini
1 File(s) 328 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\iTunes\iTunes Music\Various Artists\Weekend Anthems Vol.2 [UK] Disc 2

28/02/2005 00:23 327 desktop.ini
1 File(s) 327 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\iTunes\iTunes Music\Velvet Revolver

28/02/2005 00:23 348 desktop.ini
1 File(s) 348 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\iTunes\iTunes Music\Velvet Revolver\Contraband

28/02/2005 00:23 347 desktop.ini
1 File(s) 347 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music

14/02/2005 17:08 181 Desktop.ini
1 File(s) 181 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\...And Justice for All

15/09/2005 13:26 363 Desktop.ini
1 File(s) 363 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\2Pac-Loyal To The Game

15/09/2005 13:26 349 desktop.ini
1 File(s) 349 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\Audioslave - Out of Exile

17/09/2005 14:13 346 desktop.ini
1 File(s) 346 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\Coldplay - A Rush Of Blood To The Head

15/09/2005 13:26 367 desktop.ini
1 File(s) 367 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\Coldplay - X&Y

15/09/2005 13:26 333 desktop.ini
1 File(s) 333 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\Daniel Powter - 1 album - Bad Day

15/09/2005 13:26 350 desktop.ini
1 File(s) 350 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\Eminem - Encore

15/09/2005 13:26 312 desktop.ini
1 File(s) 312 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\Franz Ferdinand

15/09/2005 13:26 354 desktop.ini
1 File(s) 354 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\Green Day-American Idiot

15/09/2005 13:26 349 desktop.ini
1 File(s) 349 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\Guns'n'Roses

15/09/2005 13:26 372 desktop.ini
1 File(s) 372 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\Guns'n'Roses\Appetite for Destruction

15/09/2005 13:26 373 desktop.ini
1 File(s) 373 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\Guns'n'Roses\Use Your Illusion I

15/09/2005 13:26 370 desktop.ini
1 File(s) 370 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\Guns'n'Roses\Use Your Illusion II

15/09/2005 13:26 371 desktop.ini
1 File(s) 371 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\Hot Fuss

15/09/2005 13:26 343 desktop.ini
1 File(s) 343 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\In Your Honor

15/09/2005 13:26 352 desktop.ini
1 File(s) 352 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\In Your Honor\CD2

15/09/2005 13:26 351 desktop.ini
1 File(s) 351 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\Jamiroquai-Dynamite

15/09/2005 13:27 320 desktop.ini
1 File(s) 320 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\Kaiser Chiefs - Employment

15/09/2005 13:27 361 desktop.ini
1 File(s) 361 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\Kaiser Chiefs - Employment\Kaiser Chiefs - Employment

15/09/2005 13:27 345 desktop.ini
1 File(s) 345 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\Kaiser Chiefs - Employment\Kaiser Chiefs - Employment (Bonus Disc)

15/09/2005 13:27 360 desktop.ini
1 File(s) 360 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\Linkin Park

15/09/2005 13:26 349 Desktop.ini
1 File(s) 349 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\Linkin Park\Hybrid Theory

15/09/2005 13:26 348 Desktop.ini
1 File(s) 348 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\Lostprophets

15/09/2005 13:26 350 desktop.ini
1 File(s) 350 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\Lostprophets\Start Something

15/09/2005 13:26 349 desktop.ini
1 File(s) 349 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\Permission to Land

15/09/2005 13:26 356 Desktop.ini
1 File(s) 356 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\Significant Other

15/09/2005 13:26 361 Desktop.ini
1 File(s) 361 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\Snow Patrol - final straw

15/09/2005 13:26 346 desktop.ini
1 File(s) 346 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\Stereophonics- Language Sex Violence Other

15/09/2005 13:26 372 desktop.ini
1 File(s) 372 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\The Game - The Documentary

15/09/2005 13:26 347 desktop.ini
1 File(s) 347 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\Various

15/09/2005 13:27 354 desktop.ini
1 File(s) 354 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\Velvet Revolver - Contraband

15/09/2005 13:26 347 desktop.ini
1 File(s) 347 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Music\Weezer-Make Believe

15/09/2005 13:26 342 desktop.ini
1 File(s) 342 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Pictures

14/02/2005 17:08 183 Desktop.ini
1 File(s) 183 bytes

Directory of C:\Documents and Settings\Jamie\My Documents\My Videos

21/02/2005 14:44 182 Desktop.ini
1 File(s) 182 bytes

Directory of C:\Documents and Settings\Jamie\SendTo

14/02/2005 17:02 181 desktop.ini
1 File(s) 181 bytes

Directory of C:\Documents and Settings\Jamie\Start Menu

14/02/2005 16:53 62 desktop.ini
1 File(s) 62 bytes

Directory of C:\Documents and Settings\Jamie\Start Menu\Programs

14/02/2005 17:08 234 desktop.ini
1 File(s) 234 bytes

Directory of C:\Documents and Settings\Jamie\Start Menu\Programs\Accessories

31/07/2005 17:33 542 desktop.ini
1 File(s) 542 bytes

Directory of C:\Documents and Settings\Jamie\Start Menu\Programs\Accessories\Accessibility

14/02/2005 17:03 348 desktop.ini
1 File(s) 348 bytes

Directory of C:\Documents and Settings\Jamie\Start Menu\Programs\Accessories\Entertainment

14/02/2005 17:03 84 desktop.ini
1 File(s) 84 bytes

Directory of C:\Documents and Settings\Jamie\Start Menu\Programs\Administrative Tools

24/03/2005 10:45 62 desktop.ini
1 File(s) 62 bytes

Directory of C:\Documents and Settings\Jamie\Start Menu\Programs\Startup

14/02/2005 17:03 84 desktop.ini
1 File(s) 84 bytes

Directory of C:\Documents and Settings\LocalService\Local Settings

24/09/2005 12:24 62 desktop.ini
1 File(s) 62 bytes

Directory of C:\Documents and Settings\LocalService\Local Settings\History

14/02/2005 17:05 113 desktop.ini
1 File(s) 113 bytes

Directory of C:\Documents and Settings\LocalService\Local Settings\History\History.IE5

14/02/2005 17:05 113 desktop.ini
1 File(s) 113 bytes

Directory of C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files

14/02/2005 17:05 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5

14/02/2005 17:05 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\01MN8P2N

14/02/2005 17:06 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\09YRGHY7

14/02/2005 17:06 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\WTEF0XY3

14/02/2005 17:06 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\WXMFCPQ7

14/02/2005 17:06 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\NetworkService\Local Settings

24/09/2005 12:24 62 desktop.ini
1 File(s) 62 bytes

Directory of C:\Documents and Settings\NetworkService\Local Settings\History

14/02/2005 17:05 113 desktop.ini
1 File(s) 113 bytes

Directory of C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5

14/02/2005 17:05 113 desktop.ini
1 File(s) 113 bytes

Directory of C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files

14/02/2005 17:05 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5

14/02/2005 17:05 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\E1HIEKFV

15/02/2005 12:23 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\ERCDMNY7

15/02/2005 12:23 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\GTMZENKV

15/02/2005 12:23 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\UNKL8XQB

15/02/2005 12:23 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\Program Files\Microsoft Office\Office10\1033\DataServices

27/07/2000 14:30 70 DESKTOP.INI
1 File(s) 70 bytes

Directory of C:\Program Files\Warez P2P Client\My Shared Folder

26/04/2005 12:36 370 desktop.ini
1 File(s) 370 bytes

Directory of C:\RECYCLER\S-1-5-21-1454471165-790525478-725345543-1003

20/09/2005 16:42 65 desktop.ini
1 File(s) 65 bytes

Directory of C:\RECYCLER\S-1-5-21-1454471165-790525478-725345543-500

18/09/2005 13:01 65 desktop.ini
1 File(s) 65 bytes

Directory of C:\RECYCLER\S-1-5-21-790525478-573735546-839522115-1003

25/07/2005 18:47 65 desktop.ini
1 File(s) 65 bytes

Directory of C:\WINDOWS

07/08/2004 01:17 2 desktop.ini
1 File(s) 2 bytes

Directory of C:\WINDOWS\assembly

02/03/2005 18:53 227 Desktop.ini
1 File(s) 227 bytes

Directory of C:\WINDOWS\Downloaded Program Files

19/09/2005 13:40 65 desktop.ini
1 File(s) 65 bytes

Directory of C:\WINDOWS\Fonts

19/09/2005 13:41 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\WINDOWS\Offline Web Pages

19/09/2005 13:40 65 desktop.ini
1 File(s) 65 bytes

Directory of C:\WINDOWS\system32

07/08/2004 01:17 2 desktop.ini
1 File(s) 2 bytes

Directory of C:\WINDOWS\system32\config\systemprofile\Application Data

14/02/2005 16:53 62 desktop.ini
1 File(s) 62 bytes

Directory of C:\WINDOWS\system32\config\systemprofile\Local Settings

14/02/2005 16:53 62 desktop.ini
1 File(s) 62 bytes

Directory of C:\WINDOWS\system32\config\systemprofile\Local Settings\History

14/02/2005 17:06 113 desktop.ini
1 File(s) 113 bytes

Directory of C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5

14/02/2005 17:06 113 desktop.ini
1 File(s) 113 bytes

Directory of C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files

14/02/2005 17:06 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5

14/02/2005 17:06 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\AHIM53SW

14/02/2005 17:06 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\B0P89J29

14/02/2005 17:06 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\CM8L1H9G

14/02/2005 17:06 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\OYNXSEIY

14/02/2005 17:06 67 desktop.ini
1 File(s) 67 bytes

Directory of C:\WINDOWS\system32\config\systemprofile\SendTo

14/02/2005 17:02 181 desktop.ini
1 File(s) 181 bytes

Directory of C:\WINDOWS\system32\config\systemprofile\Start Menu

14/02/2005 16:53 62 desktop.ini
1 File(s) 62 bytes

Directory of C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs

14/02/2005 17:03 148 desktop.ini
1 File(s) 148 bytes

Directory of C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Accessories

14/02/2005 17:03 482 desktop.ini
1 File(s) 482 bytes

Directory of C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Accessories\Accessibility

14/02/2005 17:03 348 desktop.ini
1 File(s) 348 bytes

Directory of C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Accessories\Entertainment

14/02/2005 17:03 84 desktop.ini
1 File(s) 84 bytes

Directory of C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Startup

14/02/2005 17:03 84 desktop.ini
1 File(s) 84 bytes

Directory of C:\WINDOWS\Tasks

07/08/2004 01:17 65 desktop.ini
1 File(s) 65 bytes


When I run Trend Micro it won't run the Real Time Agent. I get the error message

THe system is busy and unable to start the Real Time scanning service status. Plaese restart and try again.

I have no sound although everything seems fine in the device manager and all drivers are up to date. I have a Asus A7N8X deluxe board and using on board sound. When i double click the Nvidia NVmixer icon I get the error

Runtime error!

Program: C:\Programs Files\ Nvidia Corporation\NVmixer\nvmixer.exe


This application has requested the runtime to terminate in an unusual way. PLease contact the applications support team for more information.
  • 0

#5
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,671 posts
Hmm. In the HijackThis log you posted there are no lines under O23
This is the section where nonstandard Windows services should be listed.
There being none when you are running ZA, Trend Micro and nVidia is unheard of.

Can you check if you missed that part of the log when you posted it or if there really are none.
In the last case I think something is missing or corrupted that handles the services.
That would explain the errors and symptoms you are experiencing.

Regards,
  • 0

#6
fonz

fonz

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts
OK not looking good then?

Here is another HIjack log I just ran

Logfile of HijackThis v1.99.1
Scan saved at 13:07:28, on 24/09/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Trend Micro\Internet Security\TMOAgent.exe
C:\Program Files\Trend Micro\Internet Security\PCClient.exe
C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
C:\Program Files\Microsoft Hardware\Keyboard\type32.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\Silicon Image\SiISATARaid\SATARaid.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1\mantispm.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
C:\Program Files\Advanced Browser\browser.exe
C:\Documents and Settings\Jamie\My Documents\HiJack This\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\en-gb\msntb.dll
O2 - BHO: System Process - {C2EEB4FA-B6D6-41b9-9CFA-ABA87F862BCB} - C:\WINDOWS\system32\navshext1.dll
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [TM Outbreak Agent] "C:\Program Files\Trend Micro\Internet Security\TMOAgent.exe" /run
O4 - HKLM\..\Run: [PCClient.exe] "C:\Program Files\Trend Micro\Internet Security\PCClient.exe"
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security\pccguide.exe"
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Pro Cam
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [BlockChecker] C:\Program Files\Block Checker\block-checker.exe
O4 - HKCU\..\Run: [SP2 Connection Patcher] "C:\Program Files\SP2 Connection Patcher\SP2ConnPatcher.exe" -n=200
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AWMON] "C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe"
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O4 - Global Startup: SATARaid.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zon...nt.cab31267.cab
O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight Class) - http://download.zone...ee/cm/ICSCM.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1122836942000
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micros...b?1124178966359
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zon...nt.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn...pdownloader.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zon...wn.cab31267.cab

nothing after O16

How do I go about sorting that? I've already tried reinstalling windows (upgrade mind u) to no avail
  • 0

#7
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,671 posts
Let's try this.
There are some programs active (good and bad) that could be blocking changes.
Disable AdWatch which is one of them.

Check the following items in HijackThis.
Close all windows except HijackThis and click Fix checked:

O2 - BHO: System Process - {C2EEB4FA-B6D6-41b9-9CFA-ABA87F862BCB} - C:\WINDOWS\system32\navshext1.dll

O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [BlockChecker] C:\Program Files\Block Checker\block-checker.exe

Then reboot and delete:
C:\Program Files\Block Checker <= the entire folder
Then try starting the Real Time Agent.

Regards,
  • 0

#8
fonz

fonz

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts
Ok, think I've done what u have asked but same probs. Here's the Hijack log after the removal of previuos one

Logfile of HijackThis v1.99.1
Scan saved at 14:02:07, on 24/09/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Trend Micro\Internet Security\TMOAgent.exe
C:\Program Files\Trend Micro\Internet Security\PCClient.exe
C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
C:\Program Files\Microsoft Hardware\Keyboard\type32.exe
C:\WINDOWS\VM_STI.EXE
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\Silicon Image\SiISATARaid\SATARaid.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\Internet Security\TSC.EXE
C:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1\mantispm.exe
C:\Documents and Settings\Jamie\My Documents\HiJack This\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\en-gb\msntb.dll
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [TM Outbreak Agent] "C:\Program Files\Trend Micro\Internet Security\TMOAgent.exe" /run
O4 - HKLM\..\Run: [PCClient.exe] "C:\Program Files\Trend Micro\Internet Security\PCClient.exe"
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security\pccguide.exe"
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Pro Cam
O4 - HKLM\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName

O4 - HKCU\..\Run: [SP2 Connection Patcher] "C:\Program Files\SP2 Connection Patcher\SP2ConnPatcher.exe" -n=200
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O4 - Global Startup: SATARaid.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zon...nt.cab31267.cab
O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight Class) - http://download.zone...ee/cm/ICSCM.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1122836942000
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micros...b?1124178966359
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zon...nt.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn...pdownloader.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zon...wn.cab31267.cab

The section I have coloured blue. These seem to be pretty new entries as I have not noticed them before until just recently. I don't know what they do or if they could be harmful or not but pretty sure they weren't there last time I ran Hijack this about a month ago

Edited by fonz, 24 September 2005 - 07:06 AM.

  • 0

#9
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,671 posts
They are related to MicroSoft's Input Message Editor that deals with oriental characters (Japanese, Chinese)

What happened when you tried to start Real Time Agent?

Regards,
  • 0

#10
fonz

fonz

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts
The Realtime Agent tries to start at startup. I'm still getting the same message. I've tried logging in as Administrator in Safe MOde and running a Hijack This scan but just getting the same results.

Thanx for the help so far by the way :tazz:
  • 0

#11
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,671 posts
Click Start > Run type services.msc > OK
In the list of services find:
TrueVector Internet Monitor
or
Trend Micro Real-time Service
Rightclick that line and choose Properties.
On the dependies tab you can see what other services are needed for them to run.

Work your way back untill you find one that is missing and let me know which one that is.

Regards,
  • 0

#12
fonz

fonz

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts
Hi. I'm not entirely sure what it is I'm looking for, However in the services there is alot of stuff that is set to disabled including all the trend micro tabs. Each of them has no dependencies but I changed the startup type to automatic and started the services and presto the Trend MIcro program worked. Tried a restart and it is fine and still working.

I was hoping to find something in the services for the NVmixer but can't see anything to do with Nvidia or Sound in it so dunno how to rectify that.

For your information the True Vector does require dependencies. the tree reads something like
AFD-Remote Procedure Call-vsdatant-TCP/IP Protocol Driver-IPSEC driver
  • 0

#13
fonz

fonz

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts
HI again. I had another look on the services tab and there was one there for audio and it too was disabled. After placing it on automatic it now works and got sound now.

Is there meant to be a lot set to Disabled? If not any idea how this would happen so I can prevent it in future.

I must give u my eternal gratitude tho Metallica as without your help I would've had no idea how to sort my problems. Top Fella :tazz:
  • 0

#14
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,671 posts
Some services do not need to be enabled.
A nice guide to what services do and if they are needed under normal circumstances was made by BlackViper.

You can read the information here:
http://majorgeeks.com/page.php?id=12

If I understood your last posts correctly the only problem left is the nVidia software.

Regards,
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP