Norton WinDoctor - Invalid ActiveX/COM Entires

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

littledevil

Thread Starter
Joined
Sep 28, 2003
Messages
7
When I scan my computer with Norton WinDoctor, My computer tells me that i have an Invalid ActiveX\Com entry. The Problem is :"AtWorkRendering\shell\PrintTo\command," refers to an invalid command entry, "C:\Documents and Settings\All Users\Application Data\Dell\Alert\0."

Norton says that: The ActiveX/COM sections of your Windows Registry contain one or more invalid entiries. This can cause documents to poen improperly, applications not to run, or your computer to crash.

I have been looking all over the interent for a solution to this prolem. And now my computer is not shutting down, I really need some help, thanks Ben Renaud
 
Joined
Feb 23, 2003
Messages
16,274
Probably repaired with a little work on your Hijack Log . Unzip the program , do a scan, save as well as copy and paste that log here.
 

littledevil

Thread Starter
Joined
Sep 28, 2003
Messages
7
Logfile of HijackThis v1.97.2
Scan saved at 12:02:50 AM, on 30/09/2003
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\WINDOWS\System32\snmp.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Dell\EUSW\Support.exe
C:\Program Files\microsoft hardware\dnetc.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Kazaa Lite\kazaa.kpp
C:\WINDOWS\System32\msiexec.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Ben\Local Settings\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.johnabbott.qc.ca/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dellnet.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Sympatico
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
F0 - system.ini: Shell=
F2 - REG:system.ini: Shell=
O2 - BHO: (no name) - {029CA12C-89C1-46a7-A3C7-82F2F98635CB} - C:\Program Files\Kontiki\bin\bh304181.dll
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: CCHelper - {0CF0B8EE-6596-11D5-A98E-0003470BB48E} - C:\Program Files\Panicware\Pop-Up Stopper Companion\CCHelper.dll
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &SearchBar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Pop-Up Stopper &Companion - {8F05B1A8-9D77-4B8F-AF54-6B2202066F95} - C:\Program Files\Panicware\Pop-Up Stopper Companion\popupus.dll
O4 - HKLM\..\Run: [DwlClient] C:\Program Files\Common Files\Dell\EUSW\Support.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [Windows Update Files] C:\Program Files\microsoft hardware\dnetc.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: Get It With Kontiki - res://C:\Program Files\Kontiki\bin\bh304181.dll/201
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: MoneySide (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{90CDF5BF-4735-4552-B25B-4F012B5EB926}: NameServer = 192.168.0.1

No idea what this is, but i hope you can help
My computer is getting more and more messed up evey day. My printer does not work now. I tried to reinstall it, and now all it does is freeze when i try to reinstall it! Also, a small window geeps poping up saying that windows to installing... and on top of everything, my computer does not shut down. Windows closes fine, but i have to turn off my computer manaully now. Very depressing...
Please help..
Ben
 
Joined
Feb 23, 2003
Messages
16,274
Rescan with hijack and put a check next to theses and have HJT fix them.


R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.johnabbott.qc.ca/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
F0 - system.ini: Shell=
F2 - REG:system.ini: Shell=
O2 - BHO: (no name) - {029CA12C-89C1-46a7-A3C7-82F2F98635CB} - C:\Program Files\Kontiki\bin\bh304181.dll
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Program O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
Files\MyWay\myBar\1.bin\MYBAR.DLL
O3 - Toolbar: &SearchBar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
O4 - Global Startup: hpoddt01.exe.lnk = ?

O8 - Extra context menu item: Get It With Kontiki - res://C:\Program Files\Kontiki\bin\bh304181.dll/201
O17 - HKLM\System\CCS\Services\Tcpip\..\{90CDF5BF-4735-4552-B25B-4F012B5EB926}: NameServer = 192.168.0.1
 
Joined
Feb 23, 2003
Messages
16,274
In addition you should download Spybot search and destroy , check for updates then download any and all. Then dp a scan and have it fix what it finds then when complete click on the immunize button.
 

littledevil

Thread Starter
Joined
Sep 28, 2003
Messages
7
Umm, it didn't work... My computer finally restarted on its own, once it was done, but then i tried to install my printer, then it all went again. I rescanned my computer with win doctor, and the invalid ActiveX/COM file is still there. windows keeps trying to reinstall itself, and my omputer wont shut down by itself again.
I really dont know what happened to my computer...
Ben
 

littledevil

Thread Starter
Joined
Sep 28, 2003
Messages
7
I'm sorry, but that hasn't changed anything again.
What is it that I am deleting when i use Hijack?
Ben
thanks for all the help by the way!
 
Joined
Feb 23, 2003
Messages
16,274
Some were spyware, some were hijackers and some were active x controllers.
 
Joined
Feb 23, 2003
Messages
16,274
If it happened recently and you are able to pinpoint it you may be able to work around by system restore.
 
Joined
Feb 23, 2003
Messages
16,274
If you are up to it you can remove the printer by going to device manager and deleting it entirely from the system then reboot and reinstall it.

Or a repair install
 

littledevil

Thread Starter
Joined
Sep 28, 2003
Messages
7
ok, ill try that. But when using system restore, does it erase any files that ive downloaded recently?
thanks a lot, Ben
 
Joined
Feb 23, 2003
Messages
16,274
Yes ben...Also the repair deletes the windows updates but leaves the programs and files intact.
 

littledevil

Thread Starter
Joined
Sep 28, 2003
Messages
7
man, you didn't have to answer my posts u know. Im very grateful for you answering me, and was just looking for some answers to my problems. If your getting fed up replyin, Dont.
Thanks for the help anyway, Ben
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Top