TheTechGuide Forum

General Category => Tech Clinic => Topic started by: indfin on May 07, 2008, 02:14:52 AM

Title: The Third Computer with Problems
Post by: indfin on May 07, 2008, 02:14:52 AM
Hi Guestolo:

As promised, here is the third computer, which seems to have a mind of its own.  Some days it works just fine (and fast) and on others it keeps freezing at every step.

A few of the issues with it:
[list=1]
Any help will be greatly appreciated.

Following is the HJT Log:

Hello...while trying to run HJT, it gave a message saying an unexpected error has occured:

procedure:modRegistry - IniGetString(sFile=system.ini, sSection=boot, sValue=Shell)...and then...
procedure:modRegistry - IniGetString(sFile=win.ini, sSection=windows, sValue=Load)

But it did generate and HJT log, and here it is:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:08:21 AM, on 5/7/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WUSB54Gv2.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\InfoMyCa.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 (http://\"http://go.microsoft.com/fwlink/?LinkId=69157\")
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 (http://\"http://go.microsoft.com/fwlink/?LinkId=54896\")
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 (http://\"http://go.microsoft.com/fwlink/?LinkId=54896\")
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 (http://\"http://go.microsoft.com/fwlink/?LinkId=69157\")
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O4 - HKLM\..\Run: [WUSB54Gv2] C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\InvokeSvc3.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User '?')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User '?')
O4 - HKUS\S-1-5-21-2052111302-706699826-1957994488-1004\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User '?')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User '?')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab (http://\"http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab\")
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: WUSB54Gv2SVC - GEMTEKS - C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe

--
End of file - 3519 bytes

Thanks.
Title: The Third Computer with Problems
Post by: guestolo on May 07, 2008, 11:41:15 AM
How long have you had most of these problems, since the installation of XP?

I see you may have tweaked the install with NLite, I can't tell on my end what you disabled or kept enabled

1. Try the following, Go to START>>RUN>>type in control userpasswords2
Hit OK
Select Users must enter a user name and password to use this computer
click OK.

2. You should be able to put your Office CD in and click OK instead of Cancel.
See if that helps?
What Office version do you have?

3. Are you letting Linskys utility control Wireless?
Have you tried letting Windows?

4. Could be issues with Nlite install, not sure?
It could be something running in the background
Try open task manager, close process on anything not needed before shutting down
Does that help?
Title: The Third Computer with Problems
Post by: indfin on May 07, 2008, 03:30:48 PM
I should have been clearer in my initial post.  The problems I mentioned are not all the problems.  Following are instances of other issues:

-- a message saying ".....cannot run the application because riched20.dll could not be found keeps popping up"
-- when I go to Network Connections panel, it shows no connections at all, even when I am connected
-- I cannot update from microsoft website because it tells me to Enable User Persistence in the Security Options for IE, even though it is already enabled.
-- etc., etc.

Ideally what I'd like to do is wipe this thing clean and start over again.  I have no files saved on the computer which I can't live without.

To address the issues you had replied to:

The problems have been there before and after XP.

I have no clue what NLite is and I did not use it.

[list=1]
There are only five processes running:
explorer.exe
winlogon.exe
csrss.exe
InfoMyCa.exe
taskmgr.exe

I believe all are required.

As I said earlier, can I just start all over again.

Regards.
Title: The Third Computer with Problems
Post by: indfin on May 07, 2008, 04:06:45 PM
A correction to Point 1 in my previous post:

The computer starts automatically into the Admin account (without the Welcome screen).  If I Switch User out of Admin, I can log into the other accounts; if I Log Off from Admin, I can't type in the passwords for the other accounts on the Welcome screen.
Title: The Third Computer with Problems
Post by: guestolo on May 10, 2008, 10:55:55 AM
Quote
As I said earlier, can I just start all over again.

Is this the route you would like to take?
If you are prepared it's not that difficult, do you have the XP CD or Recovery CD's?