« previous next »
Pages: [1] 2

Author Topic: Help with IF01.exe problem  (Read 1161 times)

leonlojup

  • Guest
Help with IF01.exe problem
« on: July 17, 2005, 05:59:44 PM »
I would appreciate some assistance with a computer problem.  I have use Adaware, SpyBot and Grisoft Anti-Virus, all of which are up to date as of today.

Yesterday I began having problems with the machine not wanting to boot correctly and had to use "go back" to find a good setup.  I also found, with Adaware the file IF01.exe which was deleted.

I have run scan disk to check all clusters on the drive, with no errors.  I have defragged today.  Below is a copy of the HiJack log which I ran earlier today.  Would appreciate any assistance.  Thank you.

Logfile of HijackThis v1.99.1
Scan saved at 12:10:59 PM, on 7/17/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\PROGRAM FILES\WILD FILE\GOBACK\GBPOLL.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\COMMON FILES\AOL\ACS\ACSD.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\STARTER.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGAMSVR.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\MEMOREX\TRAVELDRIVE2B\SHWICON.EXE
C:\PROGRAM FILES\VIEWPOINT\VIEWPOINT MANAGER\VIEWMGR.EXE
C:\PROGRAM FILES\WILD FILE\GOBACK\GBMENU.EXE
C:\PROGRAM FILES\AMERICA ONLINE 9.0\AOLTRAY.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\WINZIP\WINZIP32.EXE
C:\HJT\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by America Online
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [EnsoniqMixer] starter.exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [AVG7_AMSVR] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGAMSVR.EXE
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [ShowIcon_Memorex_USB Product Driver v2.13r002] C:\Memorex\TravelDrive2B\shwicon.exe -t"Memorex\USB Product Driver v2.13r002"
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [GoBack Polling Service] C:\Program Files\Wild File\GoBack\GBPoll.exe
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [AolAcsDaemon1] "C:\PROGRAM FILES\COMMON FILES\AOL\ACS\ACSD.EXE"
O4 - Startup: GoBack.lnk = C:\Program Files\Wild File\GoBack\GBMenu.exe
O4 - Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll
O12 - Plugin for .bcf: C:\PROGRA~1\INTERN~1\Plugins\NPBelv32.dll
O12 - Plugin for .qt: C:\Program Files\Netscape\Communicator\Program\PLUGINS\NPQTW32.DLL
O12 - Plugin for .pdf: C:\PROGRA~1\INTERN~1\PLUGINS\nppdf32.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.Email Removed
Logged

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Help with IF01.exe problem
« Reply #1 on: July 17, 2005, 08:36:01 PM »
Your version of AVG doesn't seem to be properly running
Is it the free version?
I've never used GoBack, but is recommended you disable it when running Scandisk and Defrag
« Last Edit: July 17, 2005, 08:36:56 PM by guestolo »
Logged

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here

leonlojup

  • Guest
Help with IF01.exe problem
« Reply #2 on: July 17, 2005, 08:59:30 PM »
Your version of AVG doesn't seem to be properly running
Is it the free version?

Yes it is the free version.  I have the updater disabled because with W98SE it causes a crash.  Does not seem to effect W98.

Appreciate your comments.  From what I have been able to determine if I disable Go Back, I lose all of my past "check points".

I will continue to check though to see if I can disable it without losing anything.  

Thanks.
Logged

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Help with IF01.exe problem
« Reply #3 on: July 17, 2005, 09:34:29 PM »
I wasn't completely done yet  http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/smile.gif\' class=\'bbc_emoticon\' alt=\':)\' />

Here's a bit more recommendation

Do another scan with Hijackthis and put a check next to these entries:

O4 - HKLM\..\Run: [LoadQM] loadqm.exe <-not needed on startup

O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe

After you have ticked the above entries, close All other open windows, including this one
Leave Hijackthis open and click FIX CHECKED
OK the prompt and exit Hijackthis

Access your add/Remove programs and remove
Viewpoint <-may be more than one instance

Restart your computer afterwards

Back in Windows, I still suspect AVG may be corrupt
You may want to uninstall it and reinstall it and make sure it's fully updated and run a full system scan

Post back one last hijackthis log and let me know how things are running
Could you ensure you are posting the whole hijackthis log
Typically there are more entries below this line
O14 - IERESET.INF: START_PAGE_URL=http://www.aol.com
« Last Edit: July 17, 2005, 09:35:47 PM by guestolo »
Logged

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here

leonlojup

  • Guest
Help with IF01.exe problem
« Reply #4 on: July 18, 2005, 01:43:43 AM »
<I wasn't completely done yet> - Well I understand that, VBG.

<Here's a bit more recommendation

Do another scan with Hijackthis and put a check next to these entries:

O4 - HKLM\..\Run: [LoadQM] loadqm.exe <-not needed on startup>

Well I disabled this one in MSCONFIG so it did not show up on the next run.

<O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe

After you have ticked the above entries, close All other open windows, including this one
Leave Hijackthis open and click FIX CHECKED
OK the prompt and exit Hijackthis

Access your add/Remove programs and remove
Viewpoint <-may be more than one instance

Restart your computer afterwards>

Did all of the above.  I also removed most of Adobe as it would not receive any files anyway.

<Back in Windows, I still suspect AVG may be corrupt
You may want to uninstall it and reinstall it and make sure it's fully updated and run a full system scan>

I did that also.  Removed the old AVG 7.0 and downloaded the file avg70free_323a539.exe 11.7 M.  I installed the new AVG 7.0, went and got the latest update which is 7.0.323 267.9.0 7/16/05 and ran it on the system.  Took 23 minutes to scan 28811 files, no viruses.

Also ran AdAware again with no hits.  I routinely go into internet properties when I get off the net and trash all cookies, delete all offline files and clear the history files.  I have found that if I do that I nearly never get any hits on AdAware or SpyBot.

I rebooted the system before I ran the last hijack log.

<Post back one last hijackthis log and let me know how things are running
Could you ensure you are posting the whole hijackthis log
Typically there are more entries below this line
O14 - IERESET.INF: START_PAGE_URL=http://www.Email Removed >

Here is the last hijack log:

Logfile of HijackThis v1.99.1
Scan saved at 1:23:58 AM, on 7/18/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\PROGRAM FILES\WILD FILE\GOBACK\GBPOLL.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\COMMON FILES\AOL\ACS\ACSD.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\STARTER.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\MEMOREX\TRAVELDRIVE2B\SHWICON.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGEMC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGAMSVR.EXE
C:\PROGRAM FILES\WILD FILE\GOBACK\GBMENU.EXE
C:\PROGRAM FILES\AMERICA ONLINE 9.0\AOLTRAY.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\HJT\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by America Online
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [EnsoniqMixer] starter.exe
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [ShowIcon_Memorex_USB Product Driver v2.13r002] C:\Memorex\TravelDrive2B\shwicon.exe -t"Memorex\USB Product Driver v2.13r002"
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGEMC.EXE
O4 - HKLM\..\Run: [AVG7_AMSVR] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGAMSVR.EXE
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [GoBack Polling Service] C:\Program Files\Wild File\GoBack\GBPoll.exe
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [AolAcsDaemon1] "C:\PROGRAM FILES\COMMON FILES\AOL\ACS\ACSD.EXE"
O4 - Startup: GoBack.lnk = C:\Program Files\Wild File\GoBack\GBMenu.exe
O4 - Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll
O12 - Plugin for .bcf: C:\PROGRA~1\INTERN~1\Plugins\NPBelv32.dll
O12 - Plugin for .qt: C:\Program Files\Netscape\Communicator\Program\PLUGINS\NPQTW32.DLL
O12 - Plugin for .pdf: C:\PROGRA~1\INTERN~1\PLUGINS\nppdf32.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.Email Removed

and that is the last line in the log file.

System seems to be stable, but not the fastest, but this is a 500 Mhz system which is almost 4 years old now.  Any hints on making it faster?

I do have a duplicate entry in MSCONFIG which I can't seem to delete.  Is there some special inconation that I have to speak to do that?  VBG.

Really appreciate all of the help.  Thanks in advance.

I shall make a donation.  I have some money in PayPal and if I can get them to turn lose of it I will donate it.

Please let me know if I should do anything else.

Leon.
Logged

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Help with IF01.exe problem
« Reply #5 on: July 18, 2005, 11:40:35 PM »
log looks good
You could try running this little utility
Let's see what it cleans

==Download and Install this small program
to help clean your temp folders,cookies, etc...
Windows Cleanup! 4.0
Give the link time to load or try it twice, it may be busy
==Open Windows CleanUp!>>START>>programs>>Cleanup!
Click on the CleanUp button, let it finish scanning for files, when it's done
Restart your computer

How's everything running?
Logged

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here

leonlojup

  • Guest
Help with IF01.exe problem
« Reply #6 on: July 19, 2005, 08:33:48 AM »
<<==Download and Install this small program
to help clean your temp folders,cookies, etc...
Windows Cleanup! 4.0>>

Did it.  Cleanup found about 89 whatevers and got rid of them.

Machine seems to be running fine now.

Any other thoughts?

I really appreciate your help, thank you very much.
Logged

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Help with IF01.exe problem
« Reply #7 on: July 20, 2005, 09:32:56 PM »
Log looks good
I would suggest the following for extra protections

SpywareBlaster 3.4 by JavaCool
*Will block bad ActiveX Controls
*Block Malevolent cookies in Internet Explorer and Firefox
*Restrict actions of potentially dangerous sites in Internet Explorer
After installation, Check for updates and then click the "Enable all protection"

IE-SPYAD puts over 5000 sites in your restricted zone so you'll be protected when you visit innocent-looking sites that aren't actually innocent at all.
Here is a tutorial and download link
TUTORIAL==Link to Tutorial
Download link
Logged

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here

leonlojup

  • Guest
Help with IF01.exe problem
« Reply #8 on: July 20, 2005, 11:46:59 PM »
OK, got both of them (SpywareBlaster 3.4 and IE-SpyAd) downloaded and installed.  AOl seems a little slower, but worth it if it keeps that trash off the machine.

I have also downloaded the program for Zone Alarm (Firewall), but have not installed it as yet, because I am trying to wade through the 272 page manuel (pdf format) so that I can determine how to install/configure the free version for W98SE.

I have made lots of notes on this problem and others that you have helped with.  I have a relative with an XP machine that has problems and I am going to try to help using the tips and instructions that you have given others.  I will post a HJT log for that machine when I can.

Thank you again for all of your assistance.
Logged

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Help with IF01.exe problem
« Reply #9 on: July 21, 2005, 12:27:49 AM »
Sounds good, personally I like Sygates free firewall
Not as much a resource hog as Zonealarm
But the newest version has some problems with 98SE
Recommendation is to stay with their previous version
If you would like a link, let me know, I'll post a direct link for download to the previous version
Logged

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here

leonlojup

  • Guest
Help with IF01.exe problem
« Reply #10 on: July 21, 2005, 12:36:06 AM »
Please do, I am open to all suggestions and assistance.

Thank you again.
Logged

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Help with IF01.exe problem
« Reply #11 on: July 21, 2005, 12:40:50 AM »
Just turning in for the night, let me go search for the direct link
I'll be right back
Logged

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Help with IF01.exe problem
« Reply #12 on: July 21, 2005, 12:44:17 AM »
Here's the direct download link
Hope you like the program, should be easy to figure out  http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/smile.gif\' class=\'bbc_emoticon\' alt=\':)\' />
Just install and restart the computer

http://207.33.111.31/spf/spf5.5b2710.exe
Logged

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here

leonlojup

  • Guest
Help with IF01.exe problem
« Reply #13 on: July 21, 2005, 07:08:59 PM »
This afternoon another major problem occurred.  I cannot acces AOL from my computer anymore.  When I try to log on I get some kind of connection log that does nothing and the computer goes seemingly into an endless loop.  No way to get out but to shut the machine down.

I ran adaware and it hung up for a long time in about the middle, but finally finished with no major things noted.

Here is theh latest HJT log.

Logfile of HijackThis v1.99.1
Scan saved at 6:54:55 PM, on 7/21/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\PROGRAM FILES\WILD FILE\GOBACK\GBPOLL.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\COMMON FILES\AOL\ACS\ACSD.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\STARTER.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\MEMOREX\TRAVELDRIVE2B\SHWICON.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGEMC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGAMSVR.EXE
C:\PROGRAM FILES\WILD FILE\GOBACK\GBMENU.EXE
C:\PROGRAM FILES\AMERICA ONLINE 9.0\AOLTRAY.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\HJT\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by America Online
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [EnsoniqMixer] starter.exe
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [ShowIcon_Memorex_USB Product Driver v2.13r002] C:\Memorex\TravelDrive2B\shwicon.exe -t"Memorex\USB Product Driver v2.13r002"
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGEMC.EXE
O4 - HKLM\..\Run: [AVG7_AMSVR] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGAMSVR.EXE
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [GoBack Polling Service] C:\Program Files\Wild File\GoBack\GBPoll.exe
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [AolAcsDaemon1] "C:\PROGRAM FILES\COMMON FILES\AOL\ACS\ACSD.EXE"
O4 - Startup: GoBack.lnk = C:\Program Files\Wild File\GoBack\GBMenu.exe
O4 - Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll
O12 - Plugin for .bcf: C:\PROGRA~1\INTERN~1\Plugins\NPBelv32.dll
O12 - Plugin for .qt: C:\Program Files\Netscape\Communicator\Program\PLUGINS\NPQTW32.DLL
O12 - Plugin for .pdf: C:\PROGRA~1\INTERN~1\PLUGINS\nppdf32.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.Email Removed
O17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain = aoldsl.net

I think 017 is new.  Also when it ran, it hung up on 015 (the screen at the top) for about a minute before completing.  I recall yesterday that you said that you though it should list something beyond 014.

Hope you can help.
Logged

leonlojup

  • Guest
Help with IF01.exe problem
« Reply #14 on: July 22, 2005, 01:18:09 PM »
I deleted the 017 entry with HJT, but it comes back.  Still cannot get on line with Email Removed  Also have had an error cause by ACSD which happened after I had tried AOL again and when that failed tried to open a file in Word with a title that had AOL in it.  Don't know if that is connected though.

Seems something had tried to Hijack AOL and nothing I do will pinpoint it.

Another comment, when I run Adaware it will hang up about middle way through on a TypeLib file, but eventually will complete.  Shows no errors.  But when I close Adaware my hard drive goes like crazy for about 3.5 minutes (I timed it) as if it is writing stuff everywhere.

This (drive working overtime as if writing stuff) also happens when I complete a defrag and that has been happening a long time before this problem.

I am communicating with you via another older computer here so I can do whatever you wish on the "suspect" machine with no problem.

Thanks again.
Logged

leonlojup

  • Guest
Help with IF01.exe problem
« Reply #15 on: July 22, 2005, 01:25:38 PM »
Just a note to let you know that I have not downloaded the Sygate stuff as yet so that is not part of the problem.

But I did do some reading on various files that you and others have suggested they use, trying to learn more about this process.  This was done just before I had the AOL problem and I visited sites like Major Geeks, Tom Coyote, Etc.  Don't know if that is helpful or not.

Thanks.
Logged

leonlojup

  • Guest
Help with IF01.exe problem
« Reply #16 on: July 22, 2005, 11:44:15 PM »
Any thoughts on my new problem?
Logged

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Help with IF01.exe problem
« Reply #17 on: July 22, 2005, 11:58:19 PM »
When you visited Major Geeks and TC's
What did they have you do with your hijackthis log?
That may give some incite to your problems, but not sure
That's why it's not a good idea asking for help at more than one forum
Everyone doesn't get the whole story of what was repaired or removed
Logged

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here

leonlojup

  • Guest
Help with IF01.exe problem
« Reply #18 on: July 23, 2005, 12:05:24 AM »
No, you misunderstood, or I did not make it plain.  I only went to those sites to read up on different programs that you and others had suggested that some folks use to clean their machine.  I was trying nto learn more about this process.

I have not asked anyone else for any help other than here.
Logged

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Help with IF01.exe problem
« Reply #19 on: July 23, 2005, 12:08:46 AM »
Here's what you may want to try
It seems to be an AOL problem

You may want to Uninstall AOL's software completely and then reinstall

See if the computer can connect afterwards

By the way
The scan with Hijackthis may take longer after you installed SpywareBlaster and IE-Spyad
Both adds entries to the registry that hijackthis checks
Thus, the scan seems to freeze
Seems to happen more often with users of 98 machines
« Last Edit: July 23, 2005, 12:10:50 AM by guestolo »
Logged

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here

Pages: [1] 2
« previous next »