The Third Computer with Problems

[indfin]

Hi Guestolo:

As promised, here is the third computer, which seems to have a mind of its own.  Some days it works just fine (and fast) and on others it keeps freezing at every step.

A few of the issues with it:
[list=1]

• When I switch it on, insted of opening where one logs into the accounts (I have three set up on this computer), it just opens into an account, which is none of the three set up, but in the Admin account.
• Everytime I open Word or Excel, it shows a window saying "Preparing to Install".  When I hit Cancel, the programs work fine, but it goes through that step every time.
• It is connected through wireless and it always obtains an IP address unknown to me.  When I connect to my profile saved in Linksys, then it works fine.  The connection speed varies from day-to-day between 6 and 36 Mbps.
• On days, it takes two to three attempts to shut down; other days it shuts down fine.

Any help will be greatly appreciated.

Following is the HJT Log:

Hello...while trying to run HJT, it gave a message saying an unexpected error has occured:

procedure:modRegistry - IniGetString(sFile=system.ini, sSection=boot, sValue=Shell)...and then...
procedure:modRegistry - IniGetString(sFile=win.ini, sSection=windows, sValue=Load)

But it did generate and HJT log, and here it is:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:08:21 AM, on 5/7/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WUSB54Gv2.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\InfoMyCa.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O4 - HKLM\..\Run: [WUSB54Gv2] C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\InvokeSvc3.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User '?')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User '?')
O4 - HKUS\S-1-5-21-2052111302-706699826-1957994488-1004\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User '?')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User '?')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: WUSB54Gv2SVC - GEMTEKS - C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe

--
End of file - 3519 bytes

Thanks.

[guestolo]

How long have you had most of these problems, since the installation of XP?

I see you may have tweaked the install with NLite, I can't tell on my end what you disabled or kept enabled

1. Try the following, Go to START>>RUN>>type in control userpasswords2
Hit OK
Select Users must enter a user name and password to use this computer
click OK.

2. You should be able to put your Office CD in and click OK instead of Cancel.
See if that helps?
What Office version do you have?

3. Are you letting Linskys utility control Wireless?
Have you tried letting Windows?

4. Could be issues with Nlite install, not sure?
It could be something running in the background
Try open task manager, close process on anything not needed before shutting down
Does that help?

[indfin]

I should have been clearer in my initial post.  The problems I mentioned are not all the problems.  Following are instances of other issues:

-- a message saying ".....cannot run the application because riched20.dll could not be found keeps popping up"
-- when I go to Network Connections panel, it shows no connections at all, even when I am connected
-- I cannot update from microsoft website because it tells me to Enable User Persistence in the Security Options for IE, even though it is already enabled.
-- etc., etc.

Ideally what I'd like to do is wipe this thing clean and start over again.  I have no files saved on the computer which I can't live without.

To address the issues you had replied to:

The problems have been there before and after XP.

I have no clue what NLite is and I did not use it.

[list=1]

• Now I cannot even log into the accounts because it won't let me type in the passwords.
• Will do it later
• They both suck equally
• Don't know NLite

There are only five processes running:
explorer.exe
winlogon.exe
csrss.exe
InfoMyCa.exe
taskmgr.exe

I believe all are required.

As I said earlier, can I just start all over again.

Regards.

[indfin]

A correction to Point 1 in my previous post:

The computer starts automatically into the Admin account (without the Welcome screen).  If I Switch User out of Admin, I can log into the other accounts; if I Log Off from Admin, I can't type in the passwords for the other accounts on the Welcome screen.

[guestolo]

As I said earlier, can I just start all over again.

Is this the route you would like to take?
If you are prepared it's not that difficult, do you have the XP CD or Recovery CD's?