Advertisement

There's no such thing as a stupid question, but they're the easiest to answer.
Login
Search

Advertisement

Virus & Other Malware Removal Virus & Other Malware Removal
Search Search
Search for:
Tech Support Guy > > >

Solved: Can't launch ad-aware, spybot, norton, etc unless safe mode

(New)
(!)

JeffMMI's Avatar
JeffMMI JeffMMI is offline
Junior Member with 4 posts.
THREAD STARTER
 
Join Date: May 2005
Experience: Advanced
02-May-2005, 09:07 PM #1
Unhappy Solved: Can't launch ad-aware, spybot, norton, etc unless safe mode
I've run about everything I can run on this machine. I've run the full spectrum of utilties to cleanup the viruses and trojans on this XP home system. Everything reports clean, but I still cannot run Ad-Aware, Spybot S&D, ZoneAlarn, Norton, etc. unless I boot in safe mode. I'm thinkning the regististry is toast, but I don't know which product would reliably fix it. Since it's a Compaq machine, the way to repair XP is to run the Recovery, which I believe formats the whole thing. Is there somewhere in the registry I can fix to make it behave?
cybertech's Avatar
Moderator with 69,360 posts.
 
Join Date: Apr 2002
Location: USA
03-May-2005, 07:56 AM #2
Hi JeffMMI, Welcome to TSG!!

You could post a log for us to review.
Click on this link: http://www.thespykiller.co.uk/files/HJTsetup.exe Double click on the file and it will install to C:\program files\hijackthis and create an entry in the start menu and an optional shortcut on desktop.

Close out any open browsers and launch the program.
Click on "Do a system scan and save a logfile.
The log will open in Notepad
Go to Edit,Select All, Edit, Copy
Come back to this thread
And press Ctrl+V to paste the log into the thread.
JeffMMI's Avatar
JeffMMI JeffMMI is offline
Junior Member with 4 posts.
THREAD STARTER
 
Join Date: May 2005
Experience: Advanced
03-May-2005, 05:58 PM #3
Safemode only for Ad-aware, Norton, Spybot S&D
Thanks for quick response! Here is the log file. Unfortunately, I'm been deleting so many thing, I can't tell you everything that I've cleaned off of this system. Here is what is currently running....

Logfile of HijackThis v1.97.7
Scan saved at 5:43:34 PM, on 5/3/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\msiexec.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\My Downloads\HijackThis.exe

O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/...eInstaller.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} - http://v4.windowsupdate.microsoft.co...047.7767824074
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/s...sh/swflash.cab
MFDnNC's Avatar
Member with 49,015 posts.
 
Join Date: Sep 2004
03-May-2005, 06:03 PM #4
You did NOT get HJT from the link cyber posted - that log version is VERY old
JeffMMI's Avatar
JeffMMI JeffMMI is offline
Junior Member with 4 posts.
THREAD STARTER
 
Join Date: May 2005
Experience: Advanced
04-May-2005, 07:10 AM #5
old HJT log
Today, it started telling me that Norton was trying to run, which seems like an improvement. I had turned on some more windows services, which probably allowed it to start.
You are right about the logfile. Sorry, I had gotten it from somewhere else. Here is the one you suggested:
Logfile of HijackThis v1.99.1
Scan saved at 7:08:19 AM, on 5/4/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijackthis\HijackThis.exe

O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/...eInstaller.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: PCANotify - C:\WINDOWS\SYSTEM32\PCANotify.dll
cybertech's Avatar
Moderator with 69,360 posts.
 
Join Date: Apr 2002
Location: USA
05-May-2005, 05:36 PM #6
You probably have to run the restore disk. I'm fairly sure you will get the option to format or not, just choose not to format the drive.
JeffMMI's Avatar
JeffMMI JeffMMI is offline
Junior Member with 4 posts.
THREAD STARTER
 
Join Date: May 2005
Experience: Advanced
06-May-2005, 12:52 PM #7
System Restore
Unfortunately, the Restore option that Compaq (and others) use doesn't allow for a non-format scenerio. I guess they figure the best way with hands off is to always start from scratch.
Thanks for looking at the logs.
As Seen On

BBC, Reader's Digest, PC Magazine, Today Show, Money Magazine
WELCOME TO TECH SUPPORT GUY!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.


(clock)
THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools


WELCOME
You Are Using: Server ID
Trusted Website Back to the Top ↑