[ongoing]

when i open system restore all i get is a blank screen most of my other programs dont work either....help and support wont open and when i open search i get a blank screen need help

[Advertisements]

Hello ongoing...

Let's take a look at some registry keys.

Click Start, then Run, and type regedit in the "Run box" and click "Ok"

First look at this one: HKEY_CLASSES_ROOT\CLSID\{f414c260-6ac0-11cf-b6d1-00aa00bbbb58}\InprocServer32

In the left pane, expand (click +) HKEY_CLASSES_ROOT, then CLSID, then {f414c260-6ac0-11cf-b6d1-00aa00bbbb58}, and click on InprocServer32 In the right pane, look at the value under the Data heading for Default and ThreadingModel. Post the values that you find for each here for me.

Then look at: HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{f414c260-6ac0-11cf-b6d1-00aa00bbbb558}\InprocServer32

In the left pane, expand (click +) HKEY_LOCAL_MACHINE, then SOFTWARE, then CLASSES, then CLSID, then CLSID, then {f414c260-6ac0-11cf-b6d1-00aa00bbbb558}, and click on InprocServer32 . In the right pane, again look at the value under the Data heading for Default and ThreadingModel. Post the values that you find for each here for me.

wannabe1

[wannabe1]

Hello ongoing...

Let's take a look at some registry keys.

Click Start, then Run, and type regedit in the "Run box" and click "Ok"

First look at this one: HKEY_CLASSES_ROOT\CLSID\{f414c260-6ac0-11cf-b6d1-00aa00bbbb58}\InprocServer32

In the left pane, expand (click +) HKEY_CLASSES_ROOT, then CLSID, then {f414c260-6ac0-11cf-b6d1-00aa00bbbb58}, and click on InprocServer32 In the right pane, look at the value under the Data heading for Default and ThreadingModel. Post the values that you find for each here for me.

Then look at: HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{f414c260-6ac0-11cf-b6d1-00aa00bbbb558}\InprocServer32

In the left pane, expand (click +) HKEY_LOCAL_MACHINE, then SOFTWARE, then CLASSES, then CLSID, then CLSID, then {f414c260-6ac0-11cf-b6d1-00aa00bbbb558}, and click on InprocServer32 . In the right pane, again look at the value under the Data heading for Default and ThreadingModel. Post the values that you find for each here for me.

wannabe1

[ongoing]

hi wannabe1 i have never used the reg editor before where is the clsid i cant see it i presses .......HKEY-CLASSES-ROOT but i cant see clsid i am new to all this

[wannabe1]

ongoing...

You'll have to scroll down quite a ways to see CLSID, but it will be there. The same is true of the numbered entry. The values will be to the right of the file looking icons in the right pane under the DATA heading and should be folder addresses (C:Windows...) or single words.

wannabe1

[ongoing]

hi wannabe1 i got them..................HKEY-CLASSES-ROOT.......default...c:\program files\common files\symantec shared\script blocking\scrauth.dll............threading model.........both.......HKEY-LOCAL-MACHINE........is exactly the same entryies as.......HKEY-CLASSES-ROOT

[wannabe1]

Ok...

If you are using Norton Internet Security, those settings are correct.

Have you had any malware issues lately...as in since the last time you tried to access System Restore?

Please download HiJackThis from the link in my signature (at the bottom of each post), install it, run it, and post a log for me to look at (copy/ paste).

wannabe1

[ongoing]

wannabe1 i did the scan but i dont know how to copy and paste it to this email i have it on note pad sorry about this but this is all new to me i must seem like a real idiot

[wannabe1]

Not a problem, ongoing...we were all new at this once....

Right click inside the notepad text and click "Select All", then right click again and click "Copy". Open up a reply window here, right click in it and click "Paste".

wannabe1

[ongoing]

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*Logfile of HijackThis v1.99.1
Scan saved at 12:09:44 AM, on 11/27/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\netdde.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\clipsrv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\msdtc.exe
C:\WINDOWS\system32\locator.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\vssvc.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\dmadmin.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\SYSTEM32\cidaemon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\mike\Local Settings\Temporary Internet Files\Content.IE5\GFAT87A9\HijackThis[1].exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll (file missing)
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll (file missing)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: PowerReg Scheduler.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zon...kr.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zon...nt.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} - http://messenger.msn...pDownloader.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/...s/msnchat45.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3DE0B2E1-FEB0-4125-9C4D-06F6C87A27E6}: NameServer = 159.134.237.6,159.134.248.17
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Unknown owner - C:\Program Files\Norton AntiVirus\navapsvc.exe (file missing)
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Unknown owner - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe (file missing)
O23 - Service: SAVScan - Unknown owner - C:\Program Files\Norton AntiVirus\SAVScan.exe (file missing)

thanks u learn something new everyday

[wannabe1]

ongoing...

Have you been having any problems viewing some websites?

Download this file and save it to your desktop...don't do anything with it yet. Jscript.dll

wannabe1

[ongoing]

no i havent had any problems with the web i downloades the file and saved it to my desktop

[wannabe1]

Right click on the zip folder you just downloaded and click "Extract All". Click "Next" twice and check the "Show Files" checkbox and click "Finish". Now right click on the dll file icon and click "Copy".

Click Start, then Run, and type system32...click "Ok". Right click in a blank area of the folder that opens and click "Paste"...Choose "Yes" when asked if you want to replace or overwrite the current file. Close the System32 folder and try to access the System Restore feature. Is it still blank?

wannabe1

[ongoing]

wannabe1...........i right clicked the file but i cant extract it do i need something to unzip the file

[wannabe1]

There's no "Extract All" on the right click menu? Hmmmmm....does the folder you downloaded have a zipper on it...or is it the file (Jscript.dll)

Do me a favor and right click on "My Computer" and choose "Properties". Click on the "Hardware" tab and then click the "Device Manager" button. Is the device list populated or is it blank, too?

For a compression utility (zip/unzip), you can download FreeZip from the link in my signature.

wannabe1

[ongoing]

the device manager is working ok i can see all on it