Help!! cannot open item that are in the control panel!!

[nineismine]

I dont know what did it, but suddenly I seem to be unable to open most of the items in the control panel including display, add remove programs, And system. It seems that all the ones that wont open are ones that open into a new window. I have been able to get them to open a few times, twice directly after doing a registy clean with Ontrack system Suite. I don't know if this will help but All I've installed recently is mem turbo, ontrack system Suite, and drivers for my digital camera. I tried a system restore but the one that went back the farthest wasn't far enough... Any Suggetions?

 

[steamwiz]

Hi nineismine

Start by doing a virus scan

http://housecall.trendmicro.com/

or here

http://www.pandasoftware.com/activescan/

steam

 

[nineismine]

On another note though Norton has been detecting Nimda Viruses on my computer every now and again and has been quarrantining them.

 

[nineismine]

Just a FYI Its going right now..

 

[steamwiz]

Yes - It's worth doing an on-line scan every now and again - just to double check your own anti-virus software - it's surprising how often something can get through.

Your symptoms do suggest a virus infection - it could be the blebla worm

If it comes up clean do this :-

If you post your startup list we may be able to spot something

Please post your startup list by doing the following :-

Please go here and download startuplist 1.51 :-

http://www.lurkhere.com/~nicefiles/startuplist151.zip

Download to any folder or your desktop
Unzip the zipfile
Double click the exe file
go to Edit - select all - copy - and paste the results in a new post here


steam

 

[nineismine]

StartupList report, 1/18/2003, 5:41:03 AM
StartupList version: 1.51
Started from : D:\DOCUME~1\NINEIS~1\LOCALS~1\Temp\Rar$EX00.937\StartupList.EXE
Detected: Windows XP (WinNT 5.01.2600)
Detected: Internet Explorer v6.00 (6.00.2600.0000)
* Using default options
==================================================

Running processes:

D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
D:\WINDOWS\system32\LEXBCES.EXE
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\system32\LEXPPS.EXE
D:\WINDOWS\Explorer.EXE
D:\Program Files\Mouse\Amoumain.exe
D:\WINDOWS\System32\LXSUPMON.EXE
D:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\D-Tools\daemon.exe
D:\Program Files\KFH\cl\launcher.exe
D:\Program Files\Common Files\Symantec Shared\ccApp.exe
D:\Program Files\Norton Personal Firewall\IAMAPP.EXE
D:\Program Files\Logitech\iTouch\iTouch.exe
D:\Program Files\Lexmark X74-X75\lxbbbmgr.exe
D:\Program Files\ABBYY FineReader 5.0 Sprint\CAgent.exe
D:\Program Files\ATI Multimedia\main\launchpd.exe
D:\WINDOWS\System32\ctfmon.exe
D:\Program Files\ATI Multimedia\RemCtrl\ATIX10.exe
D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\Program Files\EarthLink TotalAccess\TaskPanl.exe
D:\Program Files\Lexmark X74-X75\lxbbbmon.exe
D:\Program Files\MightyFax NT\MFNTCTL.EXE
D:\WINDOWS\System32\rundll32.exe
D:\WINDOWS\System32\Ati2evxx.exe
D:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
D:\Program Files\Norton AntiVirus\navapsvc.exe
D:\Program Files\Norton Personal Firewall\NISUM.EXE
D:\WINDOWS\System32\devldr32.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Norton Personal Firewall\SymProxySvc.exe
C:\PROGRA~1\Ontrack\SYSTEM~1\MXTask.exe
D:\WINDOWS\wanmpsvc.exe
D:\Program Files\Norton Personal Firewall\NISSERV.EXE
C:\PROGRA~1\Ontrack\SYSTEM~1\mxtask.exe
D:\Program Files\Messenger\msmsgs.exe
D:\Documents and Settings\nineismine\rundll32.exe
D:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\PROGRA~1\NETWOR~1\v11\NE.EXE
D:\WINDOWS\system32\notepad.exe
D:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXBBPSWX.EXE
D:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXBBJSWX.EXE
D:\WINDOWS\System32\taskmgr.exe
D:\Program Files\mozilla.org\Mozilla\mozilla.exe
D:\Program Files\WinRAR\WinRAR.exe
D:\DOCUME~1\NINEIS~1\LOCALS~1\Temp\Rar$EX00.937\StartupList.exe

--------------------------------------------------

Listing of startup folders:

Shell folders Common Startup:
[D:\Documents and Settings\All Users\Start Menu\Programs\Startup]
America Online 7.0 Tray Icon.lnk = D:\Program Files\America Online 7.0\aoltray.exe
Logitech Desktop Messenger.lnk = D:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
Microsoft Office.lnk = D:\Program Files\Microsoft Office\Office10\OSA.EXE
MightyFAX Controller.lnk = D:\Program Files\MightyFax NT\MFNTCTL.EXE

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = D:\WINDOWS\system32\userinit.exe,

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

WheelMouse = Amoumain.exe
LXSUPMON = D:\WINDOWS\System32\LXSUPMON.EXE RUN
ATIPTA = D:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
DAEMON Tools-1033 = "C:\Program Files\D-Tools\daemon.exe" -lang 1033
NeroCheck = D:\WINDOWS\system32\NeroCheck.exe
Launcher = "D:\Program Files\KFH\cl\launcher.exe" /P
CloneCDElbyCDFL = "D:\Program Files\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
ccApp = D:\Program Files\Common Files\Symantec Shared\ccApp.exe
ccRegVfy = D:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe
iamapp = D:\Program Files\Norton Personal Firewall\IAMAPP.EXE
QuickTime Task = "D:\Program Files\QuickTime\qttask.exe" -atboottime
zBrowser Launcher = D:\Program Files\Logitech\iTouch\iTouch.exe
KAZAA = C:\Program Files\KaZaA Lite\Kazaa.exe /SYSTRAY
Lexmark X74-X75 = "D:\Program Files\Lexmark X74-X75\lxbbbmgr.exe"
ABBYY Community Agent = D:\Program Files\ABBYY FineReader 5.0 Sprint\CAgent.exe

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

MSMSGS = "D:\Program Files\Messenger\msmsgs.exe" /background
ATI Launchpad = "D:\Program Files\ATI Multimedia\main\launchpd.exe"
ctfmon.exe = D:\WINDOWS\System32\ctfmon.exe
ATI Remote Control = D:\Program Files\ATI Multimedia\RemCtrl\ATIX10.exe
(Default) =
Mozilla Quick Launch = "D:\PROGRA~1\MOZILLA.ORG\MOZILLA\MOZILLA.EXE" -turbo
LDM = D:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
E6TaskPanel = "C:\Program Files\EarthLink TotalAccess\TaskPanl.exe" -noauth

--------------------------------------------------


Enumerating Browser Helper Objects:

(no name) - D:\WINDOWS\TPS108.DLL - {0000026A-8230-4DD4-BE4F-6889D1E74167}
(no name) - D:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
NAV Helper - D:\Program Files\Norton AntiVirus\NavShExt.dll - {BDF3E430-B101-42AD-A544-FADC6B084872}
SmartPops - D:\Program Files\Network Essentials\v11\NE.DLL - {D5C778F1-CF13-4E70-ADF0-45A953E7CB8B}

--------------------------------------------------

Enumerating Task Scheduler jobs:

Norton AntiVirus - Scan my computer.job
Symantec NetDetect.job

--------------------------------------------------

Enumerating Download Program Files:

[{11111111-1111-1111-1111-111111111111}]
CODEBASE = http://207.246.124.105/cabs/ROOSTRS3002/TPS108.cab

[Video Class]
InProcServer32 = D:\WINDOWS\Downloaded Program Files\videox.dll
CODEBASE = http://streamp.babenet.com/cabs/videox.cab

[Fswinst Control]
InProcServer32 = D:\WINDOWS\DOWNLO~1\fswinst.ocx
CODEBASE = http://www.newtopsites.com/fswinst.cab

[{731918D2-517A-47E2-886A-3BC1380C591D}]
CODEBASE = http://webpdp.gator.com/v3/download/pdpplugin_4094_hd3ptdm.cab

[HouseCall Control]
InProcServer32 = D:\WINDOWS\DOWNLO~1\xscan53.ocx
CODEBASE = http://a840.g.akamai.net/7/840/537/2003011601/housecall.antivirus.com/housecall/xscan53.cab

[{8522F9B3-38C5-4AA4-AE40-7401F1BBC851}]
CODEBASE = http://216.65.38.226/Download_Plugin.exe

[Update Class]
InProcServer32 = D:\WINDOWS\System32\iuctl.dll
CODEBASE = http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37636.7887037037

[{A1DC3241-B122-195F-B21A-000000000000}]
CODEBASE = http://www.blowsearch.com/TB/The_Ultimate_Browser_Enhancer.exe

[Shockwave Flash Object]
InProcServer32 = D:\WINDOWS\System32\macromed\flash\Flash.ocx
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

[{EB6AFDAB-E16D-430B-A5EE-0408A12289DC}]
CODEBASE = http://download.mediacharger.com/movieplace.cab

--------------------------------------------------
End of report, 7,792 bytes
Report generated in 1.187 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

 

[steamwiz]

Hi nineismine

You do have spyware in there - d'load spybot and clean it out - see if that helps

Please Download and install SpyBot,

http://www.lurkhere.com/~nicefiles/spybot14.exe

click the online tab to search for and download the updates, then shut down and relaunch SpyBot.

Go to the Settings tab > File Sets, and uncheck 'System Internals' and 'Tracks' .
These aren't needed for our present purpose, and you can always experiment with them later on.

Finally, after closing down Internet Explorer, click 'Check for problems', and have SpyBot remove all it finds 'Fix selected problems'

you may have to run spybot more than once to clear everything

Remove everything pre-ticked in Red

steam