1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Cannot Access Add/Remove Windows Comonents or turn on Intrusion Prevention

Discussion in 'Malware and Virus Removal Archive' started by ppeetteerr, 2008/04/05.

  1. 2008/04/05
    ppeetteerr

    ppeetteerr Well-Known Member Thread Starter

    Joined:
    2008/04/04
    Messages:
    128
    Likes Received:
    0
    View First Unread Thread Tools Display Modes

    Have manufacturers pre-installed Windows XP V5.1 SP2 on laptop.
    When I try to access the "Add/Remove windows components" I get an error message in a "Windows XP Setup" window saying "The application could not be initialised ".
    Also Cannot turn on "Intrusion Prevention" in Norton Protection Center
    Any advise Please

    Log file of Trend Micro HijackThis v2.0.2
    Scan saved at 11:20:41, on 05/04/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
    C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
    C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
    C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
    c:\APPS\HIDSERVICE\HIDSERVICE.exe
    C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
    C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    c:\APPS\Powercinema\Kernel\TV\CLSched.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
    C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
    C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
    C:\Apps\Powercinema\PCMService.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\uk.htm
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: PBUKV2 - {4E7BD74F-2B8D-469E-A0E8-F479B685FA7D} - C:\WINDOWS\system32\pbukv2.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: Norton Internet Security 2006 - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
    O2 - BHO: iSecurity - {A8311E8F-E459-4D22-89B4-CB9DCF10A425} - C:\WINDOWS\system32\ISECUR~1.CPL
    O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
    O3 - Toolbar: PBUKV2 - {4E7BD74F-2B8D-469E-A0E8-F479B685FA7D} - C:\WINDOWS\system32\pbukv2.dll
    O3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
    O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
    O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
    O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
    O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
    O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
    O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
    O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe "
    O4 - HKLM\..\Run: [GSICONEXE] GSICON.EXE
    O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe USB
    O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
    O4 - HKLM\..\Run: [RemHelp] remhelp.exe
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe "
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [iSecurity applet] rundll32.exe iSecurity.cpl,SecurityMonitor
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe "
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\uk.htm
    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
    O20 - AppInit_DLLs: iSecurity.cpl
    O21 - SSODL: iSecurity - {A8311E8F-E459-4D22-89B4-CB9DCF10A425} - C:\WINDOWS\system32\ISECUR~1.CPL
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPwdSvc.exe
    O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
    O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
    O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Norton Internet Security\comHost.exe
    O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
    O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
    O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
    O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
    O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

    --
    End of file - 9901 bytes

    ----------------------------------------------------------------

    ALSO I DID DECKARDS SYSTEM SCAN : DETAILS BELOW

    Deckard's System Scanner v20071014.68
    Run by edward j bradley on 2008-04-05 11:37:20
    Computer is in Normal Mode.

    -- System Restore -----------Successfully created a Deckard's System Scanner Restore Point.


    -- Last 5 Restore Point(s) --
    16: 2008-04-05 10:37:42 UTC - RP647 - Deckard's System Scanner Restore Point
    15: 2008-04-04 15:55:52 UTC - RP646 - Removed Conflict Desert Storm II
    14: 2008-04-04 15:54:56 UTC - RP645 - Installed Conflict Desert Storm II
    13: 2008-04-04 09:53:01 UTC - RP644 - Installed Ad-Aware 2007
    12: 2008-04-03 17:28:59 UTC - RP643 - Printer Driver HP DeskJet 1220C Printer Installed


    -- First Restore Point --
    1: 2008-02-09 19:17:11 UTC - RP632 - System Checkpoint


    Backed up registry hives.
    Performed disk cleanup.

    Percentage of Memory in Use: 86% (more than 75%).
    Total Physical Memory: 192 MiB (512 MiB recommended).


    -- HijackThis (run as edward j bradley.exe) ------------------------------------

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 11:40:38, on 05/04/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
    C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
    C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
    C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
    c:\APPS\HIDSERVICE\HIDSERVICE.exe
    C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
    C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    c:\APPS\Powercinema\Kernel\TV\CLSched.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
    C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
    C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
    C:\Apps\Powercinema\PCMService.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Documents and Settings\edward j bradley\Desktop\dss.exe
    C:\PROGRA~1\TRENDM~1\HIJACK~1\edward j bradley.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\uk.htm
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: PBUKV2 - {4E7BD74F-2B8D-469E-A0E8-F479B685FA7D} - C:\WINDOWS\system32\pbukv2.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: Norton Internet Security 2006 - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
    O2 - BHO: iSecurity - {A8311E8F-E459-4D22-89B4-CB9DCF10A425} - C:\WINDOWS\system32\ISECUR~1.CPL
    O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
    O3 - Toolbar: PBUKV2 - {4E7BD74F-2B8D-469E-A0E8-F479B685FA7D} - C:\WINDOWS\system32\pbukv2.dll
    O3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
    O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
    O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
    O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
    O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
    O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
    O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
    O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe "
    O4 - HKLM\..\Run: [GSICONEXE] GSICON.EXE
    O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe USB
    O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
    O4 - HKLM\..\Run: [RemHelp] remhelp.exe
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe "
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [iSecurity applet] rundll32.exe iSecurity.cpl,SecurityMonitor
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe "
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\uk.htm
    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
    O20 - AppInit_DLLs: iSecurity.cpl
    O21 - SSODL: iSecurity - {A8311E8F-E459-4D22-89B4-CB9DCF10A425} - C:\WINDOWS\system32\ISECUR~1.CPL
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPwdSvc.exe
    O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
    O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
    O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Norton Internet Security\comHost.exe
    O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
    O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
    O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
    O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
    O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

    --
    End of file - 9957 bytes

    -- File Associations -----------------------------------------------------------

    All associations okay.


    -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

    R1 StarOpen - c:\windows\system32\drivers\staropen.sys


    -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

    R2 Apple Mobile Device - "c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe" <Not Verified; Apple, Inc.; Apple Mobile Device Service>
    R2 CLCapSvc (CyberLink Background Capture Service (CBCS)) - "c:\apps\powercinema\kernel\tv\clcapsvc.exe" <Not Verified; ; CLCapSvc Module>
    R2 CLSched (CyberLink Task Scheduler (CTS)) - "c:\apps\powercinema\kernel\tv\clsched.exe" <Not Verified; ; CLSched Module>
    R2 CyberLink Media Library Service - "c:\program files\cyberlink\shared files\clml_ntservice\clmlserver.exe" <Not Verified; Cyberlink; Cyberlink Media Library Server>
    R2 GenericHidService (Generic Service for HID Keyboard Input Collections) - c:\apps\hidservice\hidservice.exe


    -- Device Manager: Disabled ----------------------------------------------------

    No disabled devices found.


    -- Scheduled Tasks -------------------------------------------------------------

    2008-04-03 15:45:56 284 --a------ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
    2008-02-22 22:12:09 570 --a------ C:\WINDOWS\Tasks\Norton AntiVirus - Run Full System Scan - edward j bradley.job


    -- Files created between 2008-03-05 and 2008-04-05 -----------------------------

    2008-04-05 11:19:26 0 d-------- C:\Program Files\Trend Micro
    2008-04-04 19:13:54 0 dr-h----- C:\Documents and Settings\edward j bradley\Recent
    2008-04-04 10:53:13 0 d-------- C:\Program Files\Lavasoft
    2008-04-04 10:53:08 0 d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
    2008-04-04 01:23:59 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard
    2008-04-03 23:21:56 691545 --a------ C:\WINDOWS\unins000.exe
    2008-04-03 23:21:56 2551 --a------ C:\WINDOWS\unins000.dat
    2008-04-03 22:31:00 0 d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
    2008-04-03 18:28:26 0 d-------- C:\Program Files\Hewlett-Packard
    2008-04-03 16:53:51 0 d-------- C:\Program Files\iSecurity
    2008-04-03 16:53:45 143872 --a------ C:\Program Files\3181046.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>
    2008-04-03 14:46:04 0 d-------- C:\Program Files\IE Extensions
    2008-03-22 16:37:38 0 d-------- C:\Documents and Settings\edward j bradley\Dave Speed


    -- Find3M Report ---------------------------------------------------------------

    2008-04-04 17:45:26 0 d-------- C:\Program Files\Common Files\Symantec Shared
    2008-04-04 15:27:58 0 d-------- C:\Program Files\Norton Internet Security
    2008-04-04 01:23:59 0 d-------- C:\Program Files\Common Files
    2008-04-03 15:50:51 0 d-------- C:\Program Files\Symantec
    2008-02-12 15:36:23 0 d-------- C:\Program Files\Kodak
    2008-02-12 15:35:43 0 d-------- C:\Program Files\Common Files\Kodak
    2008-02-12 12:55:11 0 d-------- C:\Program Files\iTunes
    2008-02-12 12:54:50 0 d-------- C:\Program Files\iPod
    2008-02-12 12:50:11 0 d-------- C:\Program Files\QuickTime
    2008-02-12 12:46:29 0 d-------- C:\Program Files\Apple Software Update
    2008-02-12 12:45:42 0 d-------- C:\Program Files\Common Files\Apple


    -- Registry Dump ---------------------------------------------------------------

    *Note* empty entries & legit default entries are not shown


    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{4E7BD74F-2B8D-469E-A0E8-F479B685FA7D}]
    17/03/2004 12:32 820736 --a------ C:\WINDOWS\system32\pbukv2.dll

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A8311E8F-E459-4D22-89B4-CB9DCF10A425}]
    03/04/2008 16:53 125440 -r-hs---- C:\WINDOWS\system32\ISECUR~1.CPL

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
    "{4E7BD74F-2B8D-469E-A0E8-F479B685FA7D} "= C:\WINDOWS\system32\pbukv2.dll [17/03/2004 12:32 820736]

    [-HKEY_CLASSES_ROOT\CLSID\{4E7BD74F-2B8D-469E-A0E8-F479B685FA7D}]
    [HKEY_CLASSES_ROOT\pbukv2.PBUKV2]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "IMJPMIG8.1 "= "C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe" [04/08/2004 14:00]
    "PHIME2002ASync "= "C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [04/08/2004 14:00]
    "PHIME2002A "= "C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [04/08/2004 14:00]
    "SynTPEnh "= "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [11/05/2005 21:03]
    "SiSPower "= "SiSPower.dll" [13/07/2005 02:55 C:\WINDOWS\system32\SiSPower.dll]
    "SoundMAXPnP "= "C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe" [14/10/2004 09:11]
    "SoundMAX "= "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" [23/09/2004 12:41]
    "SunJavaUpdateSched "= "C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe" [03/06/2004 22:05]
    "PCMService "= "c:\Apps\Powercinema\PCMService.exe" [11/05/2005 13:48]
    "GSICONEXE "= "GSICON.EXE" []
    "DSLAGENTEXE "= "dslagent.exe" []
    "UserFaultCheck "= "C:\WINDOWS\system32\dumprep 0 -u" []
    "RemHelp "= "remhelp.exe" [12/12/2002 17:21 C:\WINDOWS\system32\remhelp.exe]
    "ccApp "= "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [11/02/2008 17:22]
    "QuickTime Task "= "C:\Program Files\QuickTime\qttask.exe" [11/12/2007 11:56]
    "@ "=" " []
    "iSecurity applet "= "iSecurity.cpl" [03/04/2008 16:53 C:\WINDOWS\system32\iSecurity.cpl]
    "iTunesHelper "= "C:\Program Files\iTunes\iTunesHelper.exe" [11/12/2007 13:10]

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "swg "= "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [26/07/2007 07:05]
    "MSMSGS "= "C:\Program Files\Messenger\msmsgs.exe" [13/10/2004 17:24]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\syste m]
    "DisableRegistryTools "=0 (0x0)
    "DisableTaskMgr "=0 (0x0)

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceOb jectDelayLoad]
    "iSecurity "= {A8311E8F-E459-4D22-89B4-CB9DCF10A425} - C:\WINDOWS\system32\ISECUR~1.CPL [03/04/2008 16:53 125440]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "appinit_dlls "=iSecurity.cpl

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawser vice]
    @= "Service "

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^BT Broadband Help.lnk]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Kodak EasyShare software.lnk]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^KODAK Software Updater.lnk]

    *Newly Created Service* - COMHOST



    -- End of Deckard's System Scanner: finished at 2008-04-05 11:42:35 ------------

    --------------------------------------------------------------------------------
    Last edited by ppeetteerr : 10 Hours Ago at 11:53.
     
  2. 2008/04/05
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Scan again with HijackThis and place a check next to the following entries.

    O2 - BHO: PBUKV2 - {4E7BD74F-2B8D-469E-A0E8-F479B685FA7D} - C:\WINDOWS\system32\pbukv2.dll
    O3 - Toolbar: PBUKV2 - {4E7BD74F-2B8D-469E-A0E8-F479B685FA7D} - C:\WINDOWS\system32\pbukv2.dll


    Close all other windows then click Fix Checked. Close HijackThis.

    Delete the folder C:\Program Files\DynamicToolbar if present.


    Did the Add/Remove and Symantec problem begin before or after installing iSecurity? Check for the existence of the following files.

    C:\Windows\system32\sysocmgr.exe
    C:\Windows\inf\sysoc.inf

    If you click Start>Run and type sysocmgr then hit enter, a dialog box titled Windows XP Setup with a list of available switches should open. Does it?

    Copy the following command and paste it on the Run line then hit enter.

    notepad %windir%\inf\sysoc.inf

    The sysoc.inf file should open. Press Ctrl+A to select all, then press Ctrl+C to copy it. Paste it into a reply here please.
     

  3. to hide this advert.

  4. 2008/04/06
    ppeetteerr

    ppeetteerr Well-Known Member Thread Starter

    Joined:
    2008/04/04
    Messages:
    128
    Likes Received:
    0
    Hello, Thanks for you reply.

    I did a re-scan with Highjack This bui the two items you mention :
    O2 - BHO: PBUKV2 - {4E7BD74F-2B8D-469E-A0E8-F479B685FA7D} - C:\WINDOWS\system32\pbukv2.dll
    O3 - Toolbar: PBUKV2 - {4E7BD74F-2B8D-469E-A0E8-F479B685FA7D} - C:\WINDOWS\system32\pbukv2.dll
    were not there. (I have been trying to amend things)

    Also, I deleted the DynamicToolbar Folder.

    Also, I am not sure when the Add/Remove and the Symantec problems stareted as I heve just inherited tis laptop.

    Also, I run the sysocmgr and a Windows XP Setup box opened with a list of swicthes but it had a large red cross at the top with "Invalid rogram Arguments wewe Specified" (is this correct ?).

    Also, I did the sysoc.inf copy, see below

    [Version]
    Signature = "$Windows NT$ "
    DriverVer=07/01/2001,5.1.2600.2180

    [Components]
    NtComponents=ntoc.dll,NtOcSetupProc,,4
    WBEM=ocgen.dll,OcEntry,wbemoc.inf,hide,7
    Display=desk.cpl,DisplayOcSetupProc,,7
    Fax=fxsocm.dll,FaxOcmSetupProc,fxsocm.inf,,7
    NetOC=netoc.dll,NetOcSetupProc,netoc.inf,,7
    iis=iis.dll,OcEntry,iis.inf,hide,7
    com=comsetup.dll,OcEntry,comnt5.inf,hide,7
    dtc=msdtcstp.dll,OcEntry,dtcnt5.inf,hide,7
    IndexSrv_System = setupqry.dll,IndexSrv,setupqry.inf,,7
    TerminalServer=TsOc.dll, HydraOc, TsOc.inf,hide,2
    ims=imsinsnt.dll,OcEntry,ims.inf,,7
    fp_extensions=fp40ext.dll,FrontPage4Extensions,fp40ext.inf,,7
    msmsgs=msgrocm.dll,OcEntry,msmsgs.inf,hide,7
    WMAccess=ocgen.dll,OcEntry,wmaccess.inf,,7
    RootAutoUpdate=ocgen.dll,OcEntry,rootau.inf,,7
    IEAccess=ocgen.dll,OcEntry,ieaccess.inf,,7
    OEAccess=ocgen.dll,OcEntry,oeaccess.inf,,7

    WMPOCM=ocgen.dll,OcEntry,wmpocm.inf,,7



    Games=ocgen.dll,OcEntry,games.inf,,7
    AccessUtil=ocgen.dll,OcEntry,accessor.inf,,7
    CommApps=ocgen.dll,OcEntry,communic.inf,HIDE,7
    MultiM=ocgen.dll,OcEntry,multimed.inf,HIDE,7
    AccessOpt=ocgen.dll,OcEntry,optional.inf,HIDE,7
    Pinball=ocgen.dll,OcEntry,pinball.inf,HIDE,7
    MSWordPad=ocgen.dll,OcEntry,wordpad.inf,HIDE,7
    ZoneGames=zoneoc.dll,ZoneSetupProc,igames.inf,,7


    Starter=StartOC.dll,StarterOCSetupProc,StartOC.inf,HIDE,7

    [Global]
    WindowTitle=%WindowTitle%
    WindowTitle.StandAlone= "* "

    Hope this is all ok
    Regards
    Peter
     
  5. 2008/04/06
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Open that sysoc.inf file again and press Ctrl+End to get to the bottom of the file. Does it also have the following information (or similar)?

    The message window that came up when entering sysocmgr.exe is correct (should have a red circle with an X).

    If the sysoc.inf file does indeed have that additional information, copy and paste the following command on the run line then let me know what happens.

    sysocmgr.exe /i:%windir%\inf\sysoc.inf
     
  6. 2008/04/06
    ppeetteerr

    ppeetteerr Well-Known Member Thread Starter

    Joined:
    2008/04/04
    Messages:
    128
    Likes Received:
    0
    Hello again,
    I opened sysoc.inf file again and yes it does have exactly that at the bottom.

    Also, I run the sysocmgr.exe /i:%windir%\inf\sysoc.inf and the same Windows XP Setup Box appeared

    Regards
    Peter
     
  7. 2008/04/06
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    And then, what? The XP Setup box should appear, then shortly thereafter the Windows Components dialog should open.
     
  8. 2008/04/06
    ppeetteerr

    ppeetteerr Well-Known Member Thread Starter

    Joined:
    2008/04/04
    Messages:
    128
    Likes Received:
    0
    Hello,
    No, the Windows XP Setup Box just sits there.
    I can't do anything with it ie copy and paste it to you.
    It is just a list of switches.
    /i:<master_oc_inf> etc etc
    /u:<unattended_spec> etc etc
    /r:supress reboot etc etc
    /z:Indicates that nrgs etc etc
    /n:Forces the specified master inf etc etc
    /f:Indicates thatall component installations etc etc
    /c:Disallow cancel etc etc
    /x: Supressesthe initialising etc etc
    /q:For use with /u etc etc
    /w: Foeruse with /u etc etc
    /l: Multi-lanquage etc etc

    Regards
    Peter
     
  9. 2008/04/06
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    OK, got it now. Try this one. Highlight and copy then paste it on the Run line and hit enter.

    %windir%\system32\sysocmgr.exe /i:%windir%\inf\sysoc.inf
     
  10. 2008/04/06
    ppeetteerr

    ppeetteerr Well-Known Member Thread Starter

    Joined:
    2008/04/04
    Messages:
    128
    Likes Received:
    0
    Hello,
    Tried that but got Widows XP Setup window with "Application could not be installed "

    Regards
    Peter
     
  11. 2008/04/06
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    I'm bettin the problem is one of the lines in the sysoc.inf file. First, lets make a backup copy. Copy the following command.

    copy %windir%\inf\sysoc.inf %systemdrive%\sysoc.inf

    Now click Start>Run and type cmd then hit enter to open a command window. Right click and paste the command in the window then hit enter. If successful, proceed.

    Copy and paste this command then hit enter.

    notepad %windir%\inf\sysoc.inf

    Now, remove the following line from the sysoc.inf file, close and save the changes.

    Starter=StartOC.dll,StarterOCSetupProc,StartOC.inf,HIDE,7

    Now try this command again.

    %windir%\system32\sysocmgr.exe /i:%windir%\inf\sysoc.inf
     
  12. 2008/04/07
    ppeetteerr

    ppeetteerr Well-Known Member Thread Starter

    Joined:
    2008/04/04
    Messages:
    128
    Likes Received:
    0
    Hello,
    Did as you suggested ,removed Starter=StartOC.dll,StarterOCSetupProc,StartOC.inf,HIDE,7 but still getting
    Widows XP Setup window with "Application could not be installed "
    Regards
    Peter
     
  13. 2008/04/07
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Try creating a new sysoc.inf file as described with the utility found here.
     
  14. 2008/04/07
    ppeetteerr

    ppeetteerr Well-Known Member Thread Starter

    Joined:
    2008/04/04
    Messages:
    128
    Likes Received:
    0
    Hello again,
    Did as you suggested but it did not fix anything.
    It has however made the laptop run really slow.
    Regards
    Peter
     
  15. 2008/04/07
    ppeetteerr

    ppeetteerr Well-Known Member Thread Starter

    Joined:
    2008/04/04
    Messages:
    128
    Likes Received:
    0
    Hello,
    Amendment to my last reply.

    Did as you suggested but it did not fix anything.

    But this time when I tried to open the Add/remove Windows Components, instead of getting the "Windows XP Setup" window saying "The application could not be initialised" I got the "WindowsXP Setup" window saying
    "Setup was unable to open information file msmqocm.inf ".
    "Contact your system administrator "
    "The specific error code is 0x2 at the line 2088999592

    It has however made the laptop run really slow.

    Regards
    Peter
     
  16. 2008/04/07
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Open the sysoc.inf file again and remove the following line, if present.

    msmq=msmqocm.dll,MsmqOcm,msmqocm.inf,,6

    Save and close, then try again.

    Afterthought ....... while you're there, lets have a look at the new sysoc.inf file too. Please post it here.
     
  17. 2008/04/08
    ppeetteerr

    ppeetteerr Well-Known Member Thread Starter

    Joined:
    2008/04/04
    Messages:
    128
    Likes Received:
    0
    Hello,
    Opened sysoc.inf file there was no
    "msmq=msmqocm.dll,MsmqOcm,msmqocm.inf,,6" present.

    copy of file:

    [Version]
    Signature = "$Windows NT$ "
    DriverVer=07/01/2001,5.1.2600.2180

    [Components]
    NtComponents=ntoc.dll,NtOcSetupProc,,4
    WBEM=ocgen.dll,OcEntry,wbemoc.inf,hide,7
    Display=desk.cpl,DisplayOcSetupProc,,7
    Fax=fxsocm.dll,FaxOcmSetupProc,fxsocm.inf,,7
    NetOC=netoc.dll,NetOcSetupProc,netoc.inf,,7
    iis=iis.dll,OcEntry,iis.inf,hide,7
    com=comsetup.dll,OcEntry,comnt5.inf,hide,7
    dtc=msdtcstp.dll,OcEntry,dtcnt5.inf,hide,7
    IndexSrv_System = setupqry.dll,IndexSrv,setupqry.inf,,7
    TerminalServer=TsOc.dll, HydraOc, TsOc.inf,hide,2
    ims=imsinsnt.dll,OcEntry,ims.inf,,7
    fp_extensions=fp40ext.dll,FrontPage4Extensions,fp40ext.inf,,7
    msmsgs=msgrocm.dll,OcEntry,msmsgs.inf,hide,7
    WMAccess=ocgen.dll,OcEntry,wmaccess.inf,,7
    RootAutoUpdate=ocgen.dll,OcEntry,rootau.inf,,7
    IEAccess=ocgen.dll,OcEntry,ieaccess.inf,,7
    OEAccess=ocgen.dll,OcEntry,oeaccess.inf,,7

    WMPOCM=ocgen.dll,OcEntry,wmpocm.inf,,7



    Games=ocgen.dll,OcEntry,games.inf,,7
    AccessUtil=ocgen.dll,OcEntry,accessor.inf,,7
    CommApps=ocgen.dll,OcEntry,communic.inf,HIDE,7
    MultiM=ocgen.dll,OcEntry,multimed.inf,HIDE,7
    AccessOpt=ocgen.dll,OcEntry,optional.inf,HIDE,7
    Pinball=ocgen.dll,OcEntry,pinball.inf,HIDE,7
    MSWordPad=ocgen.dll,OcEntry,wordpad.inf,HIDE,7
    ZoneGames=zoneoc.dll,ZoneSetupProc,igames.inf,,7





    [Global]
    WindowTitle=%WindowTitle%
    WindowTitle.StandAlone= "* "




    [Components]
    msnexplr=ocmsn.dll,OcEntry,msnmsn.inf,,7



    [Strings]
    WindowTitle= "Windows Home Edition Setup "
    WindowTitle_Standalone= "Windows Components Wizard "
     
  18. 2008/04/08
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Hmmm, open the sysoc.inf file again and add the msmq line as shown below.

    TerminalServer=TsOc.dll, HydraOc, TsOc.inf,hide,2
    msmq=msmqocm.dll,MsmqOcm,msmqocm.inf,,6
    ims=imsinsnt.dll,OcEntry,ims.inf,,7


    Close and save the changes, then try the Add/Remove Components again.
     
  19. 2008/04/09
    ppeetteerr

    ppeetteerr Well-Known Member Thread Starter

    Joined:
    2008/04/04
    Messages:
    128
    Likes Received:
    0
    Hello again,
    Tried as you suggested but still getting same error message :

    "Setup was unable to open information file msmqocm.inf ".
    "Contact your system administrator "
    "The specific error code is 0x2 at the line 2088999592

    Regards
    Peter
     
  20. 2008/04/09
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Paste the following command on the Run line and hit enter.

    %windir%\inf

    It should open the inf folder. Verify that the file msmqocm.inf is present. If present, see if you can open it (just double click).


    You previously stated that the missing text from the first posting of the sysoc.inf file was identical to what I posted, which showed the operating system is XP Professional. Your sysoc.inf file after running the repair tool shows it to be XP Home Edition. Please verify which operating system you have.
     
  21. 2008/04/10
    ppeetteerr

    ppeetteerr Well-Known Member Thread Starter

    Joined:
    2008/04/04
    Messages:
    128
    Likes Received:
    0
    Hello,
    Sorry my mistake, on looking back I misunderstood .
    I am running XP Home Edition
    Regards
    Peter
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.