Need Help Reinstalling Software!!!

BLU-BLZ-03SNAKEBLU-BLZ-03SNAKE
edited January 2005 in Spyware & Virus Removal
i was refered to this site by a friend because i am haveing a problem with my computor and cant figure it out! I downloaded some music off Kazaa and got a bad worm. (ccat.exe rerun) and have now fixed the problem. The problem is I cant get my Dell printer software or my Radeon 9250 Video card software to reload! I never had this problem before. I have removed, rebooted and reloaded the software several times. At the end of loading the software, I get a "There was an error in loading this software. Or Unable to recognize language resources. How can I fix this problem? Any tips would be appreciated. I do not know much about computers at all.

thanks,
Jay

Comments

  • profdlpprofdlp The Holy City Of Westlake, Ohio
    edited December 2004
    BLU-BLZ 03SNAKE wrote:
    ...got a bad worm. (ccat.exe rerun) and have now fixed the problem...
    Exactly what steps did you take to fix this? I'm not finding much info on the subject.

    I suspect that it is either at least partially still there or has damaged some other file(s). Go Here and download HijackThis. Post the log here and we'll see if there is something else going on.

    Welcome to Short-Media, Jay. :wave:

    EDIT: Moved to the Spyware/Virus/Trojan Forum since that's where your problems began. :)
  • BLU-BLZ-03SNAKEBLU-BLZ-03SNAKE
    edited December 2004
    profdlp wrote:
    Exactly what steps did you take to fix this? I'm not finding much info on the subject.

    I suspect that it is either at least partially still there or has damaged some other file(s). Go Here and download HijackThis. Post the log here and we'll see if there is something else going on.

    Welcome to Short-Media, Jay. :wave:

    EDIT: Moved to the Spyware/Virus/Trojan Forum since that's where your problems began. :)

    man! thanks a lot! im at work now but will get the info and repost back when i go to lunch! here is a little more info for you tho...
    i noticed right off that the worm was called "ccat.exe rerun" because i looked in the processed and it was hogging ALL the cpu usage and my comp would just constantly be "ticking" and trying to boot. it would take 30 minutes to just respond to a simple task. If i tried to delete it, it would just pop right back up. i finally found out that if i logged on to another users account, it was not there and did not slow the system down at all. so i downloaded a program called "pskill.exe". so i logged on to my slow account and used the program (took 3 hrs) and it got me into the registry with their program. i used the instructed command: "pskill.exe ccat.exe" and is responded with: "ccat.exe killed!" but it would still be in the processes. How i finally got the worm was when i was attempting to drag all my programs over to the other, unaffected acc, i tried to use the pskill from there and it worked and responded with: "3 programs called ccat.exe were killed". things instantly started running faster and it was no longer in the processes or registry. (i forgot to add that the pskill program traced the worm to the "printers" folder in the c drive but when i went there, nothing was in it but its properties showed 18mb of program in it and when i tried to delete the whole folder, it said "access denied". After the worm was deleted, i was able to delete the "printers" folder and i just created a new one.)

    things seem to be perfectly normal now but i cant get my video card or printer programs to reinstall. i had previously removed video card when i wasnt sure what the problem was to narrow down the seach. I never removed the printer info but im sure it got messed up from the worm being in there, or when i deleted the "printers" folder.
    Also, I was getting "RPC not responding" and "Printer Spool not activated" but I have fixed those things now.
    I hope this helps. Sorry it was so long but I got the impression you wanted to know as much as possible. I will repost with the HiJack this log file after I go to lunch.
    Thanks again,
    Jay
  • profdlpprofdlp The Holy City Of Westlake, Ohio
    edited December 2004
    I'm getting ready to drive about 400 miles to VA. If no one else shows up to give you a hand once your HijackThis log is up I'll try and check it out late tonight or tomorrow. :)
  • BLU-BLZ-03SNAKEBLU-BLZ-03SNAKE
    edited December 2004
    Here is the log, man. I really appreciate all this!
    Jay

    Logfile of HijackThis v1.99.0
    Scan saved at 2:21:42 PM, on 12/23/2004
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
    C:\WINDOWS\system32\cisvc.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Common Files\Dell\EUSW\Support.exe
    C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe
    C:\Program Files\Dell\Support\Alert\bin\NotifyAlert.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Program Files\GIANT Company Software\GIANT AntiSpyware\gcasServ.exe
    C:\Program Files\Dell AIO Printer A960\dlbfbmgr.exe
    C:\Program Files\GIANT Company Software\GIANT AntiSpyware\gcasDtServ.exe
    C:\Program Files\Dell AIO Printer A960\dlbfbmon.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\SECRETMAKER\secretmaker.exe
    C:\Program Files\Microsoft Office\Office\OUTLOOK.EXE
    C:\Program Files\Microsoft Office\Office\WINWORD.EXE
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-us\msnappau.exe
    C:\DOCUME~1\JMW\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://channels.aimtoday.com/search/aimtoolbar.jsp
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://dallasmustang.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://channels.aimtoday.com/search/aimtoolbar.jsp
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://dallasmustang.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://channels.aimtoday.com/search/aimtoolbar.jsp
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://bankofamerica.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
    O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
    O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
    O2 - BHO: CATLEvents Object - {68132581-10F2-416E-B188-4E648075325A} - C:\DOCUME~1\JMW\LOCALS~1\Temp\tacc.dat (file missing)
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
    O2 - BHO: IeHelper Class - {A491D208-B353-490F-B81A-A8A3DC97042D} - C:\WINDOWS\system32\smiehlp.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
    O3 - Toolbar: AIM Search - {40D41A8B-D79B-43d7-99A7-9EE0F344C385} - C:\Program Files\AIM Toolbar\AIMBar.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [DwlClient] C:\Program Files\Common Files\Dell\EUSW\Support.exe
    O4 - HKLM\..\Run: [*ashard] C:\WINDOWS\Drivers\ashard.exe
    O4 - HKLM\..\Run: [*jpegrun] C:\WINDOWS\system\jpegrun.exe
    O4 - HKLM\..\Run: [*docps] C:\WINDOWS\system32\FxsTmp\docps.exe
    O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP
    O4 - HKLM\..\Run: [*asftp] C:\WINDOWS\Fonts\asftp.exe
    O4 - HKLM\..\Run: [*runsvc] C:\WINDOWS\Fonts\runsvc.exe
    O4 - HKLM\..\Run: [*mp3win] C:\WINDOWS\java\mp3win.exe
    O4 - HKLM\..\Run: [*apiis] C:\WINDOWS\apiis.exe
    O4 - HKLM\..\Run: [*avimg] C:\WINDOWS\java\Packages\avimg.exe
    O4 - HKLM\..\Run: [*sysbin] C:\WINDOWS\assembly\temp\sysbin.exe
    O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\GIANT Company Software\GIANT AntiSpyware\gcasServ.exe"
    O4 - HKLM\..\Run: [Dell AIO Printer A960] "C:\Program Files\Dell AIO Printer A960\dlbfbmgr.exe"
    O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~2.DLL,NewDotNetStartup -s
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O4 - Global Startup: SECRETMAKER.lnk = C:\Program Files\SECRETMAKER\secretmaker.exe
    O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
    O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
    O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
    O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
    O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
    O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
    O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
    O9 - Extra button: ComcastHSI - {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - http://www.comcast.net/ (file missing)
    O9 - Extra button: Support - {8828075D-D097-4055-AA02-2DBFA9D85E8A} - http://www.comcastsupport.com/ (file missing)
    O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} - http://online.comcast.net/help/ (file missing)
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
    O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - C:\Program Files\IrfanView\Ebay\Ebay.htm
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
    O10 - Broken Internet access because of LSP provider 'c:\program files\newdotnet\newdotnet6_38.dll' missing
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
    O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab
    O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.napster.com/client/isetup.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O16 - DPF: {B942A249-D1E7-4C11-98AE-FCB76B08747F} (RealArcadeRdxIE Class) - http://games-dl.real.com/gameconsole/Bundler/CAB/RealArcadeRdxIE.cab
    O23 - Service: Ati HotKey Poller - Unknown - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown - C:\WINDOWS\SYSTEM32\ati2sgag.exe
    O23 - Service: AVG6 Service - GRISOFT s.r.o - C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
    O23 - Service: TrueVector Internet Monitor - Zone Labs Inc. - C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe
    O23 - Service: X10 Device Network Service - Unknown - C:\PROGRA~1\ATIMUL~1\RemCtrl\x10nets.exe (file missing)
  • SpywareShooterSpywareShooter 127.0.0.1
    edited December 2004
    There's still a lot of junk leftover.

    O4 - HKLM\..\Run: [*ashard] C:\WINDOWS\Drivers\ashard.exe
    O4 - HKLM\..\Run: [*jpegrun] C:\WINDOWS\system\jpegrun.exe
    O4 - HKLM\..\Run: [*docps] C:\WINDOWS\system32\FxsTmp\docps.exe
    O4 - HKLM\..\Run: [*asftp] C:\WINDOWS\Fonts\asftp.exe
    O4 - HKLM\..\Run: [*runsvc] C:\WINDOWS\Fonts\runsvc.exe
    O4 - HKLM\..\Run: [*mp3win] C:\WINDOWS\java\mp3win.exe
    O4 - HKLM\..\Run: [*apiis] C:\WINDOWS\apiis.exe
    O4 - HKLM\..\Run: [*avimg] C:\WINDOWS\java\Packages\avimg.exe
    O4 - HKLM\..\Run: [*sysbin] C:\WINDOWS\assembly\temp\sysbin.exe

    Fix those entries then find and delete the files listed above, reboot and post a new log.
  • BLU-BLZ-03SNAKEBLU-BLZ-03SNAKE
    edited December 2004
    SpywareShooter wrote:
    There's still a lot of junk leftover.

    O4 - HKLM\..\Run: [*ashard] C:\WINDOWS\Drivers\ashard.exe
    O4 - HKLM\..\Run: [*jpegrun] C:\WINDOWS\system\jpegrun.exe
    O4 - HKLM\..\Run: [*docps] C:\WINDOWS\system32\FxsTmp\docps.exe
    O4 - HKLM\..\Run: [*asftp] C:\WINDOWS\Fonts\asftp.exe
    O4 - HKLM\..\Run: [*runsvc] C:\WINDOWS\Fonts\runsvc.exe
    O4 - HKLM\..\Run: [*mp3win] C:\WINDOWS\java\mp3win.exe
    O4 - HKLM\..\Run: [*apiis] C:\WINDOWS\apiis.exe
    O4 - HKLM\..\Run: [*avimg] C:\WINDOWS\java\Packages\avimg.exe
    O4 - HKLM\..\Run: [*sysbin] C:\WINDOWS\assembly\temp\sysbin.exe

    Fix those entries then find and delete the files listed above, reboot and post a new log.

    Do you mean for me to just uncheck the boxes next to the items you listed above, reboot, then post another log? Or are you saying to do something else as well?
  • SpywareShooterSpywareShooter 127.0.0.1
    edited December 2004
    Check the boxes, and click "Fix Checked", then use the Windows "Find" feature to find the files. Single click them and press SHIFT+DEL on your keyboard to delete.
  • BLU-BLZ-03SNAKEBLU-BLZ-03SNAKE
    edited December 2004
    Great. I will give this a try once I get home to my comp. Im at work now. I really appreciate your help. Im about to have to take everything off the comp and do a full reinstall if this doesnt help. I really dont want to do that b/c ive never have done it and it make me nervouse and ill loose a lot of things. Ill post the results back in 3-4 hours. thank you!
    Jay
  • SpywareShooterSpywareShooter 127.0.0.1
    edited December 2004
    Don't format your drive. This may take a few tries to get rid of, but in the end it will be better than losing all of your personal files.
  • BLU-BLZ-03SNAKEBLU-BLZ-03SNAKE
    edited December 2004
    cool. Just keep an eye on this thread and help me through it. I know NOTHING about computers! I'll take your advice. Last night, I had a friend take remote control of my comp over the internet to look around and see why the printer and video card software wouldnt load but he couldnt figure it out. I dont know how much he knows either but maybe this is something you could try if this doesnt work.
    Just to be clear, Im going to go back into "Hijackthis" and check the boxes to the files you mentioned, then choose "fix", then "delete" them? Why not just delete them to begin with?
    Jay
  • SpywareShooterSpywareShooter 127.0.0.1
    edited December 2004
    If you try to delete the files without fixing them with HijackThis, most likely you will get an error message saying that the file is in use. HJT removes the registry entry that runs the file, which allows you to delete it easier.
  • BLU-BLZ-03SNAKEBLU-BLZ-03SNAKE
    edited December 2004
    heres the new log, man. Hey, the "run" program for my dell A960 Printer is still on there. Should I delete it too?
    Thanks afain,
    Jay

    Logfile of HijackThis v1.99.0
    Scan saved at 1:50:16 PM, on 12/24/2004
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
    C:\WINDOWS\system32\cisvc.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Common Files\Dell\EUSW\Support.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Program Files\Dell\Support\Alert\bin\NotifyAlert.exe
    C:\WINDOWS\system32\cidaemon.exe
    C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-us\msnappau.exe
    C:\Program Files\Microsoft Office\Office\OUTLOOK.EXE
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Microsoft Office\Office\WINWORD.EXE
    C:\Documents and Settings\JMW\Desktop\Program Set Ups\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://channels.aimtoday.com/search/aimtoolbar.jsp
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://dallasmustang.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://channels.aimtoday.com/search/aimtoolbar.jsp
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://dallasmustang.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://channels.aimtoday.com/search/aimtoolbar.jsp
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://bankofamerica.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
    O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
    O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
    O2 - BHO: CATLEvents Object - {68132581-10F2-416E-B188-4E648075325A} - C:\DOCUME~1\JMW\LOCALS~1\Temp\tacc.dat (file missing)
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
    O2 - BHO: IeHelper Class - {A491D208-B353-490F-B81A-A8A3DC97042D} - C:\WINDOWS\system32\smiehlp.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
    O3 - Toolbar: AIM Search - {40D41A8B-D79B-43d7-99A7-9EE0F344C385} - C:\Program Files\AIM Toolbar\AIMBar.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [DwlClient] C:\Program Files\Common Files\Dell\EUSW\Support.exe
    O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\Run: [Dell AIO Printer A960] "C:\Program Files\Dell AIO Printer A960\dlbfbmgr.exe"
    O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
    O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
    O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
    O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
    O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
    O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
    O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
    O9 - Extra button: ComcastHSI - {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - http://www.comcast.net/ (file missing)
    O9 - Extra button: Support - {8828075D-D097-4055-AA02-2DBFA9D85E8A} - http://www.comcastsupport.com/ (file missing)
    O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} - http://online.comcast.net/help/ (file missing)
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
    O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - C:\Program Files\IrfanView\Ebay\Ebay.htm
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
    O10 - Broken Internet access because of LSP provider 'c:\program files\newdotnet\newdotnet6_38.dll' missing
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
    O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab
    O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.napster.com/client/isetup.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O16 - DPF: {B942A249-D1E7-4C11-98AE-FCB76B08747F} (RealArcadeRdxIE Class) - http://games-dl.real.com/gameconsole/Bundler/CAB/RealArcadeRdxIE.cab
    O23 - Service: Ati HotKey Poller - Unknown - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown - C:\WINDOWS\SYSTEM32\ati2sgag.exe
    O23 - Service: AVG6 Service - GRISOFT s.r.o - C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
    O23 - Service: TrueVector Internet Monitor - Zone Labs Inc. - C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe
  • BLU-BLZ-03SNAKEBLU-BLZ-03SNAKE
    edited December 2004
    the printer software still wont load. I removed the one other "dell a960" run program with hjt. when i plug my printer into the back of my comp, it finds the hardware but when i put the installation cd in the drive, the wizzard just searched forever then says "There was a problem installing this hardware. Dell A960. An error occurred during the installation of the device. The remote procedure call failed."

    So thats where I am.
  • SpywareShooterSpywareShooter 127.0.0.1
    edited January 2005
    That is not a spyware problem, therefore we cannot help you at this forum. You may want to try one of the other forums.
Sign In or Register to comment.