1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Installing Digital Image Suite 10 & ..... [HJT log]

Discussion in 'Malware and Virus Removal Archive' started by TBoy34, 2005/07/09.

Thread Status:
Not open for further replies.
  1. 2005/07/09
    TBoy34

    TBoy34 Inactive Thread Starter

    Joined:
    2005/07/09
    Messages:
    42
    Likes Received:
    0
    Installing Digital Image Suite 10 & .....

    I really need some computer advice. I'm running Windows XP Professional. For some reason, I cannot install certain software. Particularly Microsoft Digital Image 10. I was on the phone with Technical support. Yet, they are saying that I need to reinstall Windows Xp. I'm still thinking that I don't. Plus I have trouble shooted and installed several older versions. I'm having the same trouble with them too!

    Anyway, for some reason, I cannot pull up "msconfig ". I also cannot pull up "system Information" either. Now, with this, when I install The Digital image software. It installs. Yet, It then says, when I click on the icon, on the desktop. That it is missing something and to reinstall it. I then reinstall it. Yet, I get the same message. So, I cannot open up the software at all. I seems that something is preventing the software from installing properly. Furthermore, when I uninstall the software, I get a message that says, to close the Program Manager. Yet, I cannot figure out what the "Program Manager" is either! I really don't to reinstall this if I don't have too. Its so much work to put the computer back together. Do you have any solutions? PLus, for some reason, when I click on a hyperlink in Outlook 2003. Two windows in Internet Explorer come up. It never did this before. Only one window would open. Now it's two. Any idea's? Could it be a simple setting? Any help would be greatly appreciated.

    Timothy :confused:
    Scotch Plains, New Jersey
     
    TBoy34,
    #1
  2. 2005/07/10
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    TBoy34 - Welcome to the Board :)

    A reinstall of Windows at this point is a little drastic. The 'usual' response from Support techies when they really don't know the solution :D

    I suggest you run System File Checker ....

    Start > Run > type in sfc /scannow - note the space before the / and have your XP CD handy. SFC will run and exit without any closing dialogue. To see which files, if any, were replaced look in Event Viewer.

    Let us know how this pans out.

    If the Outlook problem remains I suggest you start another thread in the Outlook forum.
     
    PeteC,
    #2


  3. to hide this advert.

  4. 2005/07/10
    Steve R Jones

    Steve R Jones SuperGeek Staff

    Joined:
    2001/12/30
    Messages:
    12,315
    Likes Received:
    252
    Can you bring up task manager? If not, you more than likely have a virus/trojan....

    Problems Related to Variant of the W32.Klez Worm Virus Infection
    http://support.microsoft.com/default.aspx?scid=kb;en-us;326833&Product=winxp

    SYMPTOMS

    When you run Windows XP or Windows-based programs, you may experience one or more of the following symptoms:

    Windows XP and Windows-based programs run very slowly.
    Documents do not open properly, or when they open, they do not contain all the correct information.

    You cannot start Windows Task Manager.



    Free On-Line Virus Scanner
    http://housecall.trendmicro.com
     
    Steve R Jones,
    #3
  5. 2005/07/11
    TBoy34

    TBoy34 Inactive Thread Starter

    Joined:
    2005/07/09
    Messages:
    42
    Likes Received:
    0
    When I use this "sfc /scannow " It asks for the Windows XP Disc. I don't have the disk. As I had it installed by a local computer repair business here. Is there another way around this? Are there any other solutions?

    Tim
     
    TBoy34,
    #4
  6. 2005/07/11
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    Mmm - have you checked that you have a legal copy of XP - Is your copy of Windows Genuine?
     
    PeteC,
    #5
  7. 2005/07/11
    TBoy34

    TBoy34 Inactive Thread Starter

    Joined:
    2005/07/09
    Messages:
    42
    Likes Received:
    0
    Copy Of Genuine

    Yes the copy is genuine. Yet its one of those copies that is, registered with businesses that can install it on many systems. So, I don't have a physical copy of it. I can't even pull up msconfig. I did a search for msconfig. The search found nothing. I don't know, how that file got deleted. I can't figure this out. I guess I might have to have this reinstalled after all?

    :confused: :confused: :confused:
     
    TBoy34,
    #6
  8. 2005/07/12
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    Have you followed Steve Jones' advice?

    Re System File Checker search your drive for an i386 folder - should be several hundred Mb in size and follow the instructions here to point SFC to it.

    If that proves not to be possible download HijackThis through Quicklinks in my signature, save it to a folder on your drive, say C:\HJT and not to the desktop or a temporary folder, run it and post the log file here.
     
    PeteC,
    #7
  9. 2005/07/12
    TBoy34

    TBoy34 Inactive Thread Starter

    Joined:
    2005/07/09
    Messages:
    42
    Likes Received:
    0
    Log File (HighJackThis)

    Logfile of HijackThis v1.99.1
    Scan saved at 7:12:20 PM, on 7/12/2005
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Stardock\SDMCP.exe
    C:\Program Files\Object Desktop\WindowBlinds\wbload.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Microsoft Hardware\Keyboard\type32.exe
    C:\Program Files\Microsoft Hardware\Mouse\point32.exe
    C:\WINDOWS\system32\netdde.exe
    C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
    C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
    C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
    C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
    C:\Program Files\Trend Micro\Internet Security 2005\pccguide.exe
    C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
    C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
    C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Stardock\CursorXP\CursorXP.exe
    C:\Program Files\!Easy ScreenSaver Studio\EzSSStudio.exe
    C:\Program Files\Emoticons Mail\emomail.exe
    C:\PROGRA~1\MUSICM~1\MUSICM~1\MMDiag.exe
    C:\WINDOWS\System32\cisvc.exe
    C:\Program Files\Executive Software\Diskeeper\DkService.exe
    C:\PROGRA~1\Webshots\webshots.scr
    C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
    C:\WINDOWS\System32\svchost.exe
    C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
    C:\Program Files\Musicmatch\Musicmatch Jukebox\mim.exe
    C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
    C:\Program Files\WinCustomize\Tray\wctray.exe
    C:\Program Files\Object Desktop\Component Tray\sdctray.exe
    C:\Program Files\Object Desktop\IconX\IconX.exe
    C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
    C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
    C:\Program Files\Trillian\trillian.exe
    C:\WINDOWS\system32\cidaemon.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\WINDOWS\system32\WISPTIS.EXE
    C:\PROGRA~1\WINZIP\winzip32.exe
    C:\WINDOWS\Temp\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS13
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS13
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\PCHEALTH\HELPCTR\System\panels\blank.htm
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\PCHEALTH\HELPCTR\System\panels\blank.htm
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe "
    O4 - HKLM\..\Run: [POINTER] C:\Program Files\Microsoft Hardware\Mouse\point32.exe
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
    O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
    O4 - HKLM\..\Run: [LogonStudio] "C:\Program Files\WinCustomize\LogonStudio\logonstudio.exe" /RANDOM
    O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe "
    O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe "
    O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~1\mimboot.exe
    O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 2005\pccguide.exe "
    O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe "
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
    O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Executive Software\Diskeeper\DkIcon.exe "
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [BootSkin Startup Jobs] "C:\Program Files\Stardock\WinCustomize\BootSkin\BootSkin.exe" /StartupJobs
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [CursorXP] C:\Program Files\Stardock\CursorXP\CursorXP.exe
    O4 - HKCU\..\Run: [EzSSS] "C:\Program Files\!Easy ScreenSaver Studio\EzSSStudio.exe" -T
    O4 - HKCU\..\Run: [Emoticons Mail] C:\Program Files\Emoticons Mail\emomail.exe
    O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O8 - Extra context menu item: Linked ima&ges - C:\Program Files\IEimage\IEimage.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O16 - DPF: {08BEF711-06DA-48B2-9534-802ECAA2E4F9} (PlxInstall Class) - http://down.plaxo.com/down/release/PlaxoInstall.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x409
    O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/techsupp/asa/LSSupCtl.cab
    O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab
    O16 - DPF: {31E68DE2-5548-4B23-88F0-C51E6A0F695E} (Microsoft PID Sniffer) - https://support.microsoft.com/OAS/ActiveX/odc.cab
    O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://appldnld.m7z.net/content.inf...W/win/019-0312.20050111.MmVrT/iTunesSetup.exe
    O16 - DPF: {4D7F48C0-CB49-4EA6-97D4-04F4EACC2F3B} (InstallShield Setup Player 2K2) - http://www.napster.com/client/setup.exe
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by19fd.bay19.hotmail.msn.com/resources/MsnPUpld.cab
    O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/07a2991dbebf40c89f06/netzip/RdxIE601.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1119653321281
    O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.5.0) -
    O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.napster.com/client/isetup.cab
    O16 - DPF: {BAC01377-73DD-4796-854D-2A8997E3D68A} (Yahoo! Photos Easy Upload Tool Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/ydropper/ydropper1_3us.cab
    O16 - DPF: {CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA} (Java Runtime Environment 1.4.1_02) -
    O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/asa/SymAData.cab
    O16 - DPF: {ED28050F-D713-43BA-A376-DCC5C35407D5} - http://entimg.msn.com/client/msnmusax2702.cab
    O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
    O16 - DPF: {FA945BB6-9D37-43FC-9B2A-AF09F56CBBF0} (moDiagCollectionActiveX Object) - http://www.musicmatch.com/form/support/tech/diagnostics/cabs/DiagCollectionControl.cab
    O20 - Winlogon Notify: MCPClient - C:\Program Files\Common Files\Stardock\mcpstub.dll
    O20 - Winlogon Notify: WB - C:\Program Files\Object Desktop\WindowBlinds\fastload.dll
    O21 - SSODL: IconPackager Repair - {1799460C-0BC8-4865-B9DF-4A36CD703FF0} - C:\Program Files\Object Desktop\IconPackager\iprepair.dll
    O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\Diskeeper\DkService.exe
    O23 - Service: Iomega Activity Disk2 - Unknown owner - C:\PROGRA~1\Iomega\System32\ActivityDisk.exe (file missing)
    O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
    O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
    O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
    O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
     
    TBoy34,
    #8
  10. 2005/07/13
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    OK - this thread has been moved to the Removing Spyware & Viruses forum for analysis of the HJT log. I am no expert in this, but see nothing obvious.
    One question - did this problem start after loading any particular piece of software? This poster suggests that his problems started after installing freware from Stardock.
     
    PeteC,
    #9
  11. 2005/07/14
    TBoy34

    TBoy34 Inactive Thread Starter

    Joined:
    2005/07/09
    Messages:
    42
    Likes Received:
    0
    No it didn't. Maybe I need to unistall the freeware. Where can I find the thread now. I'm not sure what you meant about forwarding.

    Tim
     
    TBoy34,
    #10
  12. 2005/07/14
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    PeteC,
    #11
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...