|
|
|||||||||
|
|||||||||
| |||||||||
|
|
|
| |||||||||
![]() |
|
|
«
Previous Thread
|
Next Thread
»
|
Thread Tools | Search this Thread | Rate Thread | Display Modes |
|
#1
|
|||
|
|||
|
Hello,
This is my first posting. I'm not sure if this is the right location for this but recently, upon starting my computer, the following pop-ups appear: 1) Rundll Issues -error loading nView.dll "A dynamic link library (DLL) initialization failed" 2) Active Desktop Recovery appears 3) nwiz.exe has encountered a problem I am also posting my Highjack This results in hopes of someone's expertise in helping me w/ these computer issues. Logfile of HijackThis v1.99.1 Scan saved at 9:32:47 AM, on 10/15/2006 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\TEMP\winB2.tmp.exe C:\Documents and Settings\Administrator.YOUR-KYBTG65GXE.007\Local Settings\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe O1 - Hosts: localhost 127.0.0.1 O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: (no name) - {6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - C:\WINDOWS\System32\pmnonop.dll O2 - BHO: (no name) - {73364D99-1240-4dff-B11A-67E448373048} - C:\WINDOWS\System32\ipv6monl.dll O2 - BHO: SSL encrypt - {746455FE-D059-47e7-AF0E-140E03F5A447} - C:\WINDOWS\System32\nsk42.dll O2 - BHO: Class - {867B4F9C-0332-018A-6E56-FFC6D30B9968} - C:\WINDOWS\xpicp1.dll (file missing) O2 - BHO: (no name) - {9c691a33-7dda-4c2f-be4c-c176083f35cf} - (no file) O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 3.1\aoltb.dll (file missing) O3 - Toolbar: (no name) - {08BEC6AA-49FC-4379-3587-4B21E286C19E} - (no file) O3 - Toolbar: Happytofind Toolbar - {A6790AA5-C6C7-4BCF-A46D-0FDAC4EA90EB} - C:\WINDOWS\system32\gtool.dll O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE O4 - HKLM\..\Run: [Pure Networks Port Magic] "C:\PROGRA~1\PURENE~1\PORTMA~1\PortAOL.exe" -Run O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize O4 - HKLM\..\Run: [MoneyStartUp10.0] "c:\Program Files\Microsoft Money\System\Activation.exe" O4 - HKLM\..\Run: [IPHSend] C:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe O4 - HKLM\..\Run: [BlockTracker] c:\hp\bin\BlockTracker.exe O4 - HKLM\..\Run: [atl_helper] SysEntry.exe O4 - HKLM\..\Run: [0ade95ec.exe] C:\WINDOWS\System32\0ade95ec.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [System] C:\WINDOWS\System32\kernels8.exe O4 - HKLM\..\Run: [ControlPanel] C:\WINDOWS\System32\cmd32.exe internat.dll,LoadKeyboardProfile O4 - HKLM\..\Run: [winsys001] qvxgamet3.exe O4 - HKLM\..\Run: [loaddr] C:\WINDOWS\ogv.exe O4 - HKLM\..\Run: [ms] C:\DOCUME~1\ADMINI~1.007\LOCALS~1\Temp\28772\gm.exe O4 - HKLM\..\RunServices: [SystemTools] C:\WINDOWS\System32\kernels8.exe O4 - HKLM\..\RunServices: [winsys001] qvxgamet3.exe O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0 O4 - Global Startup: wupdmgr.exe O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 3.1\aoltb.dll (file missing) O9 - Extra button: Verizon Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\WINDOWS\System32\shdocvw.dll O9 - Extra button: Happytofind Toolbar - {A26ABCF0-1C8F-46e7-A67C-0489DC21B9CC} - C:\WINDOWS\system32\gtool.dll O9 - Extra 'Tools' menuitem: Happytofind Toolbar - {A26ABCF0-1C8F-46e7-A67C-0489DC21B9CC} - C:\WINDOWS\system32\gtool.dll O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - c:\Program Files\Microsoft Money\System\mnyviewer.dll (file missing) O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab O16 - DPF: {B49C4597-8721-4789-9250-315DFBD9F525} (IWinAmpActiveX Class) - http://cdn.digitalcity.com/radio/ampx/ampx2.6.1.11_en_dl.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{11849F77-B49B-473F-B3E3-9A5DD2480CA0}: NameServer = 85.255.116.118,85.255.112.205 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.114.89 85.255.112.82 O17 - HKLM\System\CS1\Services\Tcpip\..\{11849F77-B49B-473F-B3E3-9A5DD2480CA0}: NameServer = 85.255.114.89,85.255.112.82 O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.116.118 85.255.112.205 O17 - HKLM\System\CS2\Services\Tcpip\..\{11849F77-B49B-473F-B3E3-9A5DD2480CA0}: NameServer = 85.255.116.118,85.255.112.205 O17 - HKLM\System\CS3\Services\Tcpip\Parameters: NameServer = 85.255.116.118 85.255.112.205 O17 - HKLM\System\CS3\Services\Tcpip\..\{11849F77-B49B-473F-B3E3-9A5DD2480CA0}: NameServer = 85.255.116.118,85.255.112.205 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.116.118 85.255.112.205 O20 - Winlogon Notify: emul65 - C:\WINDOWS\SYSTEM32\emul65.dll O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll O20 - Winlogon Notify: pmnonop - C:\WINDOWS\SYSTEM32\pmnonop.dll O20 - Winlogon Notify: rpcc - C:\WINDOWS\System32\rpcc.dll O20 - Winlogon Notify: wintfj32 - C:\WINDOWS\SYSTEM32\wintfj32.dll O21 - SSODL: DCOM Server 3339 - {2C1CD3D7-86AC-4068-93BC-A02304BB3339} - C:\WINDOWS\System32\3339_32.dll O21 - SSODL: DCOM Server 2236 - {2C1CD3D7-86AC-4068-93BC-A02304BB2236} - C:\WINDOWS\System32\qlqun.dll O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe O23 - Service: Content Monitoring Tool (msCMTSrvc) - Unknown owner - C:\WINDOWS\system32\msCMTSrvc.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe |
|
#2
|
||||
|
||||
|
Hi NYC Woman,
It's probably better to create a new thread as it will get more attension. I'm sure some helpful mod will cut this into its own thread. Basically the same advice as above, reproducin it here so when the thread is split all the details will be in one place. Hi, Do you have an antivirus installed? if not download AVG. Then dowload the following software: Ewido Adaware Spybot Hijackthis Update your antivirus (or AVG), ewido, adaware and spybot. After updating can you run full system scans with the antivirus, ewido, adaware and spybot(this may take a while depending on the size of your disks). Then run the trend housecall. After all this reboot and run hijackthis. Do a scan and save the log and post it here so we can see whats running on your machine after all the scans. Hope this helps. Displeaser
__________________
Vi Veri Veniversum Vivus Vici. |
|
#3
|
||||
|
||||
|
Thread split.
__________________
The No Ma'am commandments: 1.) It is O.K. to call hooters 'knockers' and sometimes snack trays 2.) It is wrong to be French 3.) It is O.K. to put all bad people in a giant meat grinder 4.) Lawyers, see rule 3 5.) It is O.K. to drive a gas guzzler if it helps you get babes 6.) Everyone should car pool but me 7.) Bring back the word 'stewardesses' 8.) Synchronized swimming is not a sport 9.) Mud wrestling is a sport |
![]() |
| Viewing: Dev Shed Forums > System Administration > Antivirus Protection > rundll issues - hijackthis log included |
| Thread Tools | Search this Thread |
| Display Modes | Rate This Thread |
|
|
|
|