[ozmoses2005]

Hello,


Im having trouble with my comp. finding .net framework vs1.1.4322, using search and run methods
several apps and programs not initializing correctly when I use them, install them, or try to uninstall them.

I have unistalled the software and re-installed(.net framework vs1.1.4322), and it and seems to have no more error messages, but my comp. still cant find it(even though i can locate the folder myself windows still cant locate it), so I'm still afraid that I will have more problems with future apps and programs.

Can anyone help me, please? I have been working on this for weeks now!


Here's my Logfile of HijackThis v1.99.1
Scan saved at 3:13:07 PM, on 12/15/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Norton SystemWorks\Norton GoBack\GBPoll.exe
C:\WINDOWS\System32\GEARSec.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Ghost\Agent\VProSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
C:\PROGRA~1\NORTON~2\NORTON~3\NPROTECT.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exe
C:\WINDOWS\SYSTEM\DRIVER\ntuser.exe
C:\WINDOWS\ewemqmm.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Norton SystemWorks\Norton Ghost\Agent\GhostTray.exe
C:\PROGRA~1\NORTON~2\NORTON~3\SPEEDD~1\NOPDB.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Norton SystemWorks\Norton GoBack\GBTray.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\windoc.exe
C:\Program Files\Common Files\Symantec Shared\SYMUNDO.EXE
C:\WINDOWS\RegEdit.Exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
F:\Program Files\Registry Mechanic\RegMech.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\DOCUME~1\ADMINI~1.HOM\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = D:\WINDOWS\system32\blank.htm
O2 - BHO: IRiras Class - {95C60327-8E17-44D6-98EB-7EB70CC606DD} - C:\WINDOWS\system32\irashsna.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [DrvLsnr] C:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exe
O4 - HKLM\..\Run: [QuickTime Task] "F:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ewemqmm] C:\WINDOWS\ewemqmm.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Norton Ghost 10.0] "C:\Program Files\Norton SystemWorks\Norton Ghost\Agent\GhostTray.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [irassync] D:\WINDOWS\system32\irasyncd.exe
O4 - HKCU\..\Run: [Norton SystemWorks] "C:\Program Files\Norton SystemWorks\cfgwiz.exe" /GUID {05858CFD-5CC4-4ceb-AAAF-CF00BF39736A} /MODE CfgWiz
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Norton GoBack.lnk = C:\Program Files\Norton SystemWorks\Norton GoBack\GBTray.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - C:\Program Files\Norton SystemWorks\Norton Cleanup\WCQuick.lnk
O9 - Extra 'Tools' menuitem: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - C:\Program Files\Norton SystemWorks\Norton Cleanup\WCQuick.lnk
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop...p/PCPitStop.CAB
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1134028802906
O16 - DPF: {94B82441-A413-4E43-8422-D49930E69764} (TLIEFlashObj Class) - https://rtc1.webresp...p/TLIEFlash.CAB
O18 - Filter: text/html - {6793D547-38DD-4325-B35A-F1817EDFA567} - F:\Program Files\CMMan\mfhlp.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: GoBack Polling Service (GBPoll) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton GoBack\GBPoll.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Ghost\Agent\VProSvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton UnErase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~2\NORTON~3\NPROTECT.EXE
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: NTBOOTMGR (NTBOOT) - Unknown owner - C:\WINDOWS\SYSTEM\DRIVER\ntuser.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~2\NORTON~3\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Windows Overlay Components - Unknown owner - D:\WINDOWS\xbhcnkb.exe (file missing)

Edited by ozmoses2005, 15 December 2005 - 05:17 PM.

[Advertisements]

So are you installing the newest .net framework( version 2).

[warriorscot]

So are you installing the newest .net framework( version 2).

[ozmoses2005]

no, I have not installed that one I was told to install .net framework vs1.1
I thought this would include 1.1.4322
Should I install vs 2.0?

p.s.

oh and a few weeks ago my drives c: and f: were changed somehow? to be re-named
c: became d:, and f: became c:
weird huh?

ever hear of starforce?

Edited by ozmoses2005, 15 December 2005 - 05:43 PM.

[ozmoses2005]

To add a little insight I am also having trouble with my computer locating certain clsid{}InprocServer32 files
about 37 of them to be exact.
Norton win doctor says they are missing.these files are refered to as being all located in "c:\Programfiles\Commonfiles\Microsoft Shared\Themes\blank"
Yet, I know exactly where they are because I went their location and saw them.

norton says not to automatically fix these problems, so i haven't,
cuz I want not to screw anything up.

during the time the drives were changed ,d:(wich was c: to begin with) was my 80gig drive and c:(f: to begin with)was my 10 gig drive

So do I have to go back into each file and rename its location even though that should automatically be done?

I'm stuck, I'll try installing the version you suguested.

Edited by ozmoses2005, 15 December 2005 - 05:57 PM.

[warriorscot]

the release of 2.0 wasnt really publicised a great deal, when your drives changes letter did you make any changes to the system.
Did you try doing an online virus scan, if you use Norton AV i wouldnt its rubbish.

You might try posting your drive switcheroo problem in windows XP forum, its quite unusual, im sure they would appreciate it( ive never seen it happen but im more hardware techy really)

Give 2.0 a bash and come back and see if it changed anything.

And boy if you are messing with starforce, may whoever you pray to have mercy on you because starforce wont, and netheir will we. lol.

[ozmoses2005]

Well I had to get a dll for 2.0 but it works , yet the missing files in the key, "CLSID\{EFEDF1EE-AD78-4DE4-9878-8E110683E49F}\InprocServer32," refers to a missing file, "C:\Program Files\Common Files\Microsoft Shared\Themes\blank." wich caused 37 errors exactly the same did not get fixed even after reboot

I read a solution in another thread that would only help if (1)I had a windows cd that wasn't unreadable(scratched\kids!)and (2)I was completely insane and wanted to screw up my reg keys

but it did say these are norton caused errors and these files need to be deleted, however where are they these keys, and it also said it had to be done a certain way(very long process)
Why cant I just use hijack to remove them?

cuz otherwise I'm waitin for an update from norton.

Oh, and boy the way, After about 230h ours strong I have effectively removed all the drivers that "starforce software" leaves behind, even though their advice says their not hidden within your software, oh they are, [bleep] little diggin, renaming [bleep], [bleep] [bleep] f'n moles!!LOL(sorry about the french)
And no you don't wanna know what I had to do, I only documented about half of it anyway, but I do have a simple solution for everyone else with these problems:

1: do not install, use , open, uninstall, move, or do anything with anyfile,folder,ect, before doing this:

a:remove the software from your computer, by uninstalling it and deleting it completely it all its containing folders
b:go here http://onlinesecurit...ds/sfdrvrem.zip
and download this removal tool
run it twice to make sure the "critters" are gone
restart your computer and run scandisk with the fix errors box checked, and then restart again, your comp. should be back to normal

remember not to do anything on your computer but that when you see drives move, or disappear,yes they even rename themselves and take all the destination folders and rename them as well, yeah for ALL YOUR FILES YOU LOVE
I have felt the scar of STARFORCE and survived by beating them the hard way without a crash, ect, and still have a playable game, That I dont even like!!!!!LOL so dont waste your time trying to use all the anti-starforce software from various sites, just remember to back up your system very well!!!

and a very deserved thankyou to
warriorscot for helping me

if you know how to help me with these reg keys could you?thanks

Please do not include an e-mail address in any post in order to avoid unwanted contact

Edited by Keith, 15 December 2005 - 09:38 PM.

[warriorscot]

lol, im not really the greatest with reg keys and reg editing, starforce is a real pain, its usually fine if you have the game disk and it is a later version of starforce, i just avoid games that have starforce puts me off buying them which is a shame because i wanted to get one today that used starforce, since it is a seperate problem you can post in the win xp forum those guys are good at that stuff, im a lowly hardware tech that has a bit of common sense, i wouldnt ever rely on norton you think starforce is bad it is worse.