TheTechGuide Forum
General Category => Tech Clinic => Topic started by: Guest_atomilano on December 28, 2004, 09:47:09 PM
-
When I booted up my computer I received a message at the finish of the boot that the registry files were recovered from the log and it was successful. I had this about a month ago and it really created a mess. The person on your forum helped me. I think it is coming from a webdsite that I was checking out but I am not sure. What is happening now is that when I open Outlook and try to open a mail ( the mail is being recieved) ( even one previously opened) I receive a message "one or more parts of the message cannot be displayed' click ok, then another message 'There was an error opening this message. There is not enough memory'. The next problem is that I click on the Internet Explorer icon and I have the site set to www.cnn.com and I get a pop up box "File Download-Security Warning" Do you want to save this file: Name:www_cnn_com/
Type: unknown file type
From : www.cnn.com
Save or cancel.
I am wireless and I can see the connection is fine but it will not recognize any www. I put in.
I tried to run Norton Virus scan and when the box opens it is completely blank , an empty pop up box with the norton icon in the left upper corner.
Any help you can give me is greatly appreciated. I am using another computer since I cannot access the internet with mine.
-
Hi again, I'm not sure if this will help
But could you please download Hijackthis, the latest version from
HERE (http://\"https://ssl.perfora.net/tools.radiosplace.com/HijackThis.exe\") or HERE (http://\"http://aumha.org/downloads/hijackthis.exe\")
You can download it from one computer and put it on a floppy and transfer it to the other computer if it can't get online
Save it on the other computer to a permanent folder
Again, run a scan and save the log
Post the whole contents of the log
You can transfer the log from a floppy to the other computer
I just want to see if anything is hiding on your computer
-
HI
The problem is the CD reader on the computer I am using for online purposes is not working . So I am stuck. The best I could do is fax it to you , is that an option?
It would be with the version of hijack from Nov v1.98.2. any other things we could do?
-
I was able to get the cd reader to work on this old Dell so here is the Hijack 1.98.2
Logfile of HijackThis v1.98.2
Scan saved at 9:30:17 PM, on 12/28/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\HPConfig.exe
C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\HPQ\One-Touch\OneTouch.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\System32\hphmon05.exe
C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe
C:\WINDOWS\system32\carpserv.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\HJT\hijackthis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.cnn.com/ (http://\"http://www.cnn.com/\")
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qus8l.hpwis.com (http://\"http://qus8l.hpwis.com\")
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://qus8l.hpwis.com/ (http://\"http://qus8l.hpwis.com/\")
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Display Settings] C:\Program Files\HPQ\Notebook Utilities\hptasks.exe /s
O4 - HKLM\..\Run: [QT4HPOT] C:\Program Files\HPQ\One-Touch\OneTouch.EXE
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [RoxioEngineUtility] "C:\Program Files\Common Files\Roxio Shared\System\EngUtil.exe"
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe"
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe
O4 - HKLM\..\Run: [Lexmark X6100 Series] "C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://qus8l.hpwis.com
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cab (http://\"http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab\")
O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cab (http://\"http://www.ravantivirus.com/scan/ravonline.cab\")
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab (http://\"http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab\")
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/activedat...ta/SymAData.cab (http://\"http://www.symantec.com/techsupp/activedata/SymAData.cab\")
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsupp/ac.../ActiveData.cab (http://\"https://www-secure.symantec.com/techsupp/activedata/ActiveData.cab\")
-
I received a message at the finish of the boot that the registry files were recovered from the log and it was successful
That part, I'm not really sure what you mean
The log looks ok
Try this for OE
http://insideoe.tomsterdam.com/problems/er...rrors.htm#crash (http://\"http://insideoe.tomsterdam.com/problems/errors.htm#crash\")
Look at the top 3 suggestions
This is a IE SP2 issue
"File Download-Security Warning"
The only thing I get when I visit the link below with IE and SP2 and Mozilla Firefox is it's blocking popups from that page
So I'm curious why it's asking you to download something
Try that link below, does the same thing happen?
http://www.cnn.com/ (http://\"http://www.cnn.com/\")
Also, to be on the safe side, have you been to Windows update and got all the latest High Priority updates?
-
The message " I received a message at the end of the boot...." was the first thing that happened before I realized the email was not working and Internet explorer was not working. It was strange and it was the same message that I received before in Nov when I worked with you to restore the registry files. I knew I was going into a troubled area when I saw this. I never see this message. What could cause this?
I am up to date on the Windows High priority updates as of last week. I tried to launch it but it comes back and says in internet explorer:
File download: windowsupdate.microsoft.htm
type: HTLM document 3.11 kb
From: windowsupdate.microsoft.com
so I cannot give it a double check.
I have tried Http:/www.cnn.com/
and I get the message File download www_cnn_com
Type: unknown file type
From www.cnn.com
SAVE or Cancel
The virus scan job that I have scheduled launches with the pop-up box that normally would show me the number of files scanned, alerts etc , none of the information shows the pop-up is a white empty pop up , so I do not know if it is running or not. I will check the task manager.
I feel like something got into my laptop and corrupted files, especially when I received the message about the registery files were recovered successfully.
I am trying the suggestions on OE.
-
Just to be safe, have you tried a System Restore to just before this happened
Start>>All programs>>Accessories>>System Tools>>System Restore
The dates allowed will be highlighted
-
When I try start>all programs
At this point I cannot go any further because nothing pops up when the cursor is on all programs,it looks like it is dead, no sub window comes up for me to select Accessories>system tools> system restore. I cannot get to it.
-
What happens when you go to START>>RUN>>type in msconfig and hit OK
Do you get to the System config. utility?
Can you Launch System Restore from there?
-
when I click on
START> there is no RUN option, and I noticed it is opening as USER at the top of the box after clicking on START, should it be ADMIN? How do I switch to admin or get to see RUN?
I right clicked on start and said "open all users" then I saw the programs folder.
Here I clicked on Accessories, then opened System tools, then System REstore shortcut and POPup screen appeared, with System RESTORE in the title of the box , upper left hand corner.
-
The System REstore screen was blank similar to the norton virus scan screen.
-
Hi
I was looking at the OE fix suggestions from the "when outlook Express crashes" and I am wondering what the first statement means or how to get to it:
"Close OE and open the store folder in windows explorer" . Should I try this suggestion even though there are other things going wrong besides OE problems?
-
I think that there more issues than OE
You may be hiding the run command
Right click the bottom Task bar and select Properties
Click the Start Menu tab
Customize
Advanced tab
In the Start menu Items scroll down and put a check in Run Command
OK and Apply
See if you can now go to START>>RUN
copy and paste this into the Run command and click OK
c:\windows\system32\restore\rstrui.exe
Still no luck, this may not work, but try it in safe mode
In normal mode, try copying and pasting this into the run command
sfc /scannow --- close your browser and hit OK
This may take awhile
You may have to have your Windows CD ready
I would almost venture that you should try another online virus scan--if you can
at Trend Micro's--Set to Autoclean before you try sfc /scannow
Save the report and post it
http://housecall.trendmicro.com/ (http://\"http://housecall.trendmicro.com/\")
-
The RUN command was checked on and I unchecked and checked it again, did APPLY and it is still not showing up. Do I need to be in ADMIN mode.
I cannot get to the site you http:/houscall.trendmicro.com/ I keep getting the download message.
-
I am taking a look at the Operating system cd and I get an error message ;
Windows set up
Set up cannot continue because the version of Windows on your computer is newer than the version on the CD . (maybe becasue of the windows fixes that have been applied since March 2004 , I am not sure) . Warning : If you decide to delete the the newer version of Windows that is currently installed on your computer, the files and settings cannot be recovered".
Can you give me any advice or a step by step process to reinstall the XP operating system. I have not ever done this before so I need some help. I did back up whatever files I had created of my own first. I think I will need to load all software CD's that I have. I am wireless and I am wondering if this is part of the reason why I am having so many issues with my PC in the last few months. I have a firewall and Norton Internet security. I am interested in changing from Norton to something else so if you can advise me that would be great. Thanks for all of your help this far
-
Hi again, I'm not at my comp. that's why I'm not signed in
You could try restarting into safe mode and using the Admin account(you are using XP home?)and see what happens, see if you can access System Restore
If no go
With the troubles you're experiencing you may have better luck doing a clean install
This link will walk you through it
http://www.winsupersite.com/showcase/windo...xp_sg_clean.asp (http://\"http://www.winsupersite.com/showcase/windowsxp_sg_clean.asp\")
If you run into any problems just reboot and start again
After you are installed
For now install Service Pack 1a and then visit Windows updates and get all Critical updates
As far as your wireless router check the manual, I don't know which one you use.....
Don't install Recommended updates and Service pack 2 at Windows Updates
Don't forget to get the latest Video card drivers from the manufacturer, don't get them from Microsoft and possibly motherboard drivers
check your manual
Here's a link to service pack 1a
http://www.microsoft.com/windowsxp/downloa...p1/default.mspx (http://\"http://www.microsoft.com/windowsxp/downloads/updates/sp1/default.mspx\")
-
From that guide to clean install Windows XP, don't worry about updating the bios at this time
-
Hi
I used the windows XP install cd and did a 'repair' and it cleared up the problems that I was having.
thanks
-
I have been using it. view dbx file (http://\"http://www.oemailrecovery.com/view-dbx-files.html\") and outlook express email recovery (http://\"http://www.mail-repair.com/email-recovery.html\") more stable and secure than other programs.