1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Norton Win Doctor

Discussion in 'All Other Software' started by Flrman1, Feb 19, 2003.

Thread Status:
Not open for further replies.
Advertisement
  1. Flrman1

    Flrman1 Thread Starter

    Joined:
    Jul 26, 2002
    Messages:
    46,329
    I use Norton win doctor on a regular basis and the last few times I ran it it found thes same invalid ActiveX entries in the registry. I just ran it three times in a row and it found and supposedly fixed these. It says it has fixed them yet it hasn't. I am posting what it found so maybe someone can tell me if I should be concerned about these and if so how can I fix it? It will take me two posts to get both images up here.
     
  2. Flrman1

    Flrman1 Thread Starter

    Joined:
    Jul 26, 2002
    Messages:
    46,329
    I'm slipping I didn't get it the fisrt time.[​IMG]
     

    Attached Files:

  3. Flrman1

    Flrman1 Thread Starter

    Joined:
    Jul 26, 2002
    Messages:
    46,329
    #2[​IMG]
     

    Attached Files:

  4. TonyKlein

    TonyKlein Malware Specialist

    Joined:
    Aug 26, 2001
    Messages:
    10,392
  5. Flrman1

    Flrman1 Thread Starter

    Joined:
    Jul 26, 2002
    Messages:
    46,329
    Thanks Tony!
     
  6. Flrman1

    Flrman1 Thread Starter

    Joined:
    Jul 26, 2002
    Messages:
    46,329
    Tony K, Not long after posting this thread my PC started freezing up in all my programs. I am surprised I was able to get on here. I have done a virus scan(clean) tried System restore, ran sfc /scannow, Last known good configuration everything I can think of. Is it possible that these invalid ActiveX entries are causing this? Last night I couldn' get any of my programs to open without freezing up before they even got completely open. I had to boot into safe mode to try system restore and run virus scan. I am posting my startup list to see if maybe you can spot anything there. I run spybot and adaware religiously so I really don't know what's up. I just ran them both last night before this started happening and both were clean.


    StartupList report, 2/20/2003, 7:02:32 AM
    StartupList version: 1.51
    Started from : C:\Documents and Settings\Mark Bean\Local Settings\Temp\Temporary Directory 2 for startuplist151.zip\StartupList.EXE
    Detected: Windows XP (WinNT 5.01.2600)
    Detected: Internet Explorer v6.00 (6.00.2600.0000)
    * Using default options
    ==================================================

    Running processes:

    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\PROGRA~1\NORTON~1\NORTON~1\navapw32.exe
    C:\Program Files\Lavasoft\Ad-aware 6\Ad-watch.exe
    C:\PROGRA~1\AWS\WEATHE~1\Weather.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zapro.exe
    C:\WINDOWS\System32\DllHost.exe
    C:\Program Files\Common Files\Microsoft Shared\Speech\sapisvr.exe
    C:\WINDOWS\System32\CTsvcCDA.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
    C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
    C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\System32\devldr32.exe
    C:\Documents and Settings\Mark Bean\Local Settings\Temp\Temporary Directory 2 for startuplist151.zip\StartupList.exe

    --------------------------------------------------

    Listing of startup folders:

    Shell folders Common Startup:
    [C:\Documents and Settings\All Users\Start Menu\Programs\Startup]
    ZoneAlarm Pro.lnk = C:\Program Files\Zone Labs\ZoneAlarm\zapro.exe

    --------------------------------------------------

    Checking Windows NT UserInit:

    [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    UserInit = C:\WINDOWS\system32\userinit.exe,

    --------------------------------------------------

    Autorun entries from Registry:
    HKLM\Software\Microsoft\Windows\CurrentVersion\Run

    NAV Agent = C:\PROGRA~1\NORTON~1\NORTON~1\navapw32.exe
    Ad-watch = C:\Program Files\Lavasoft\Ad-aware 6\Ad-watch.exe

    --------------------------------------------------

    Autorun entries from Registry:
    HKCU\Software\Microsoft\Windows\CurrentVersion\Run

    Weather = C:\PROGRA~1\AWS\WEATHE~1\Weather.exe 1
    ctfmon.exe = C:\WINDOWS\System32\ctfmon.exe

    --------------------------------------------------


    Enumerating Browser Helper Objects:

    (no name) - C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
    (no name) - c:\windows\googletoolbar.dll - {AA58ED58-01DD-4d91-8333-CF10577473F7}
    NAV Helper - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll - {BDF3E430-B101-42AD-A544-FADC6B084872}

    --------------------------------------------------

    Enumerating Task Scheduler jobs:

    FRU Task #Hewlett-Packard#hp psc 2200 series#1042248764.job
    Norton AntiVirus - Scan my computer.job
    Norton SystemWorks One Button Checkup.job
    Symantec NetDetect.job

    --------------------------------------------------

    Enumerating Download Program Files:

    [symsupportutil]
    CODEBASE = http://www.symantec.com/techsupp/activedata/symsupportutil.CAB
    OSD = C:\WINDOWS\Downloaded Program Files\OSD34.OSD

    [sys Class]
    InProcServer32 = C:\WINDOWS\Downloaded Program Files\PCPitStop.dll
    CODEBASE = http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB

    [YInstStarter Class]
    InProcServer32 = C:\WINDOWS\Downloaded Program Files\yinsthelper.dll
    CODEBASE = http://download.yahoo.com/dl/installs/yinst.cab

    [InstallFromTheWeb ActiveX Control]
    InProcServer32 = C:\WINDOWS\Downloaded Program Files\iftw.dll
    CODEBASE = http://tw.msi.com.tw/autobios/client/iftwclix.cab

    [Yahoo! Webcam Upload Wrapper]
    InProcServer32 = C:\WINDOWS\Downloaded Program Files\yuplapp.dll
    CODEBASE = http://chat.yahoo.com/cab/yuplapp.cab

    [{8EDAD21C-3584-4E66-A8AB-EB0E5584767D}]
    CODEBASE = http://toolbar.google.com/data/GoogleActivate.cab

    [Update Class]
    InProcServer32 = C:\WINDOWS\System32\iuctl.dll
    CODEBASE = http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37652.2237037037

    [{BDA25AB2-5805-49CE-9C98-29FCDDF652EB}]
    CODEBASE = http://beta.anywebcam.com/awc/GM.ocx

    [Symantec RuFSI Registry Information Class]
    InProcServer32 = C:\WINDOWS\Downloaded Program Files\rufsi.dll
    CODEBASE = http://security.symantec.com/SSC/SharedContent/common/bin/cabsa.cab

    [Shockwave Flash Object]
    InProcServer32 = C:\WINDOWS\System32\macromed\flash\Flash.ocx
    CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

    [Microsoft Office Tools on the Web Control]
    InProcServer32 = C:\WINDOWS\Downloaded Program Files\OUTC.DLL
    CODEBASE = http://officeupdate.microsoft.com/TemplateGallery/downloads/outc.cab

    [ActiveDataObj Class]
    InProcServer32 = C:\WINDOWS\Downloaded Program Files\ActiveData.dll
    CODEBASE = http://www.symantec.com/techsupp/activedata/ActiveData.cab

    [Live Collaboration]
    InProcServer32 = C:\WINDOWS\Downloaded Program Files\RntX.dll
    CODEBASE = https://rr.esecurecare.net/rnt/rnl/java/RntX.cab

    [MSN Chat Control 4.5]
    InProcServer32 = C:\WINDOWS\Downloaded Program Files\MSNChat45.ocx
    CODEBASE = http://fdl.msn.com/public/chat/msnchat45.cab

    --------------------------------------------------
    End of report, 6,024 bytes
    Report generated in 0.391 seconds

    Command line options:
    /verbose - to add additional info on each section
    /complete - to include empty sections and unsuspicious data
    /full - to include several rarely-important sections
    /force9x - to include Win9x-only startups even if running on WinNT
    /forcent - to include WinNT-only startups even if running on Win9x
    /forceall - to include all Win9x and WinNT startups, regardless of platform
    /history - to list version history only
     
  7. TonyKlein

    TonyKlein Malware Specialist

    Joined:
    Aug 26, 2001
    Messages:
    10,392


    Not a chance.

    Hard to say what did cause it though. Did restoring your system to a prior date make any difference at all?
     
  8. Relic

    Relic

    Joined:
    Feb 16, 2002
    Messages:
    37
    This has happened to me in the past and the only way I could fix these little pains was to go to the advanced tab when fixing and choose one of either 3 or 4 ways ...keep trying them until you get the right fix...there is one that will send you to the registry for a manual fix(be careful with this one).Hey ,I hope it works for you!
     
  9. Flrman1

    Flrman1 Thread Starter

    Joined:
    Jul 26, 2002
    Messages:
    46,329
    Thanks Guys for your help. I don't really know what happened but it got worse I could not open anything when i would click on a program the dialogue box that says "windows cannot open this file because it does not know what program created it "etc... this was even happening when I tried to open windows explorer the only thing I could do was click on internet explorer and get on the net. To make a long story short I ended up having to reformat and do a clean install of XP. I tried a repair and the repair install wouldn't work (Long story). Luckily I didn't lose much I had all my important data backed up.
     
  10. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Similar Threads - Norton Doctor
  1. theborg
    Replies:
    9
    Views:
    161
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/119784

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice