1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Program Removal

Discussion in 'All Other Software' started by biggrobbstud, Jan 30, 2005.

Thread Status:
Not open for further replies.
Advertisement
  1. biggrobbstud

    biggrobbstud Thread Starter

    Joined:
    Dec 9, 2004
    Messages:
    187
    I made a mistake and downloaded a program not meant for windows xp. Specifically file vault. I uninstalled it but i still get an error massage when my computer starts up. i did a registry cleaning, optimizing and a few other things. can anybody help me kill this error.
     
  2. polak

    polak

    Joined:
    Oct 12, 2003
    Messages:
    567
    Is using System Restore to a date prior to installing the program an option??
     
  3. biggrobbstud

    biggrobbstud Thread Starter

    Joined:
    Dec 9, 2004
    Messages:
    187
    I had kinda thought about it but i had some other stuff i was looking forward to keeping that i had downloaded since then.
     
  4. kath100

    kath100

    Joined:
    Aug 20, 2003
    Messages:
    1,062
    Check the dates and times in the restore. Windows creates a restore point each time you install a program. You may be able to restore to a point before the bad one and after the good ones.
    :)
     
  5. biggrobbstud

    biggrobbstud Thread Starter

    Joined:
    Dec 9, 2004
    Messages:
    187
    How does that work. Are you sayin I can restore to a point before the bad program, then i can go back and restore to a point after the good ones??? I kinda know the dates. Bad one exactly a week ago and the good ones just about every day after.
     
  6. caroline40

    caroline40

    Joined:
    Feb 1, 2005
    Messages:
    2
    I had to reformat my pc last night. I restored it to Novemeber 2004 and everything i have downloaded since then has remained on my pc. :)
     
  7. Couriant

    Couriant Trusted Advisor

    Joined:
    Mar 26, 2002
    Messages:
    32,472
    First Name:
    James
    Where are you getting the message? In Windows or when the computer is booting up (when it's still in the black screen)
     
  8. biggrobbstud

    biggrobbstud Thread Starter

    Joined:
    Dec 9, 2004
    Messages:
    187
    getting it on desktop right when windows starts up its there. now i cant restore because or a rundl32 error. if u can check out my other threads and help i would greatly appreciate it. hijack this and my pet worm in the other software dept and i have one in the xp os dept too. they are about the same though.please help
     
  9. caroline40

    caroline40

    Joined:
    Feb 1, 2005
    Messages:
    2
    You could also Try this, it helped me get rid of an annoying error message. Click on Start, then Run. Type in, msconfig.exe.When the system configuration utility page opens click on Start. This will show you a list of all the programmes that start up when your computer loads. Look for the error page and unclick it then click apply and ok. You will need to restart your computer. Hope this helps.
     
  10. Couriant

    Couriant Trusted Advisor

    Joined:
    Mar 26, 2002
    Messages:
    32,472
    First Name:
    James
    you might have / had spyware and it hasn't removed the file. Repost a HJT thread
     
  11. biggrobbstud

    biggrobbstud Thread Starter

    Joined:
    Dec 9, 2004
    Messages:
    187
    windows cannot find msconfig.exe make sure blah blah blah. i cant do anything. i think i torched my pc somehow
     
  12. biggrobbstud

    biggrobbstud Thread Starter

    Joined:
    Dec 9, 2004
    Messages:
    187
    here is the hijack post from last night. i cant post an updated one because when i try to open hijack is says...you guessed it...windows cannot find...
    Logfile of HijackThis v1.98.2
    Scan saved at 10:28:53 PM, on 1/31/2005
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
    C:\WINDOWS\System32\gearsec.exe
    C:\WINDOWS\system32\HPConfig.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\WINDOWS\system32\RadioSvr.exe
    C:\WINDOWS\System32\snmp.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\HpRfDev.exe
    C:\WINDOWS\explorer.exe
    c:\documents and settings\all users\start menu\programs\startup\msupdate.exe
    C:\PROGRA~1\MIF7A5~1\MSBNTray.exe
    C:\PROGRA~1\NORTON~1\navapw32.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\WINDOWS\ktarn.exe
    C:\PROGRA~1\MUSICM~1\MUSICM~1\mm_tray.exe
    C:\PROGRA~1\SPRITE~1\SPRITE~1\SPRITE~3.EXE
    C:\PROGRA~1\ISTsvc\istsvc.exe
    C:\PROGRA~1\MI3AA1~1\WCESCOMM.EXE
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\BullsEye Network\bin\bargains.exe
    C:\pub\software\HijackThis.exe
    C:\Program Files\Sprint\PCS Connection Manager\Connection Manager.exe
    C:\PROGRA~1\DAP\DAP.EXE

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us4nb.hpwis.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.couldnotfind.com/search_...ount_id=1001693
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.couldnotfind.com/search_...ount_id=1001693
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.couldnotfind.com/search_...ount_id=1001693
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by AT&T WorldNet Service
    F2 - REG:system.ini: Shell=explorer.exe winsock2.exe
    F3 - REG:win.ini: run=c:\fvault.exe
    N1 - Netscape 4: user_pref("browser.startup.homepage", "http://www.wisc.edu/"); (C:\WiscWorld Users\fberetta\Netscape Web Browser\prefs.js)
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Yahoo! Companion BHO - {13F537F0-AF09-11d6-9029-0002B31F9E59} - C:\Program Files\Yahoo!\Common\ycomp5,0,8,0.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O2 - BHO: ADP UrlCatcher Class - {F4E04583-354E-4076-BE7D-ED6A80FD66DA} - C:\WINDOWS\System32\msbe.dll
    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - c:\Program Files\Microsoft Money\System\mnyviewer.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Common\ycomp5,0,8,0.dll
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
    O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - C:\Program Files\DAP\DAPIEBar.dll
    O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
    O4 - HKLM\..\Run: [MMTray] C:\Program Files\MusicMatch\MusicMatch Jukebox\mm_tray.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [Pure Networks Port Magic] "C:\PROGRA~1\PURENE~1\PORTMA~1\PortAOL.exe" -Run
    O4 - HKLM\..\Run: [Z8anInA] C:\WINDOWS\ktarn.exe
    O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\PROGRA~1\MI3AA1~1\WCESCOMM.EXE"
    O4 - HKCU\..\Run: [SpriteService] "C:\Program Files\Sprite Software\Sprite Backup\SpriteService.exe"
    O4 - Global Startup: Microsoft Broadband Networking.lnk = ?
    O4 - Global Startup: MsUpdate.exe
    O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
    O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm
    O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
    O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
    O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
    O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
    O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
    O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
    O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:\PROGRA~1\DAP\DAP.EXE
    O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - c:\Program Files\Microsoft Money\System\mnyviewer.dll
    O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O10 - Broken Internet access because of LSP provider 'bmi_lsp.dll' missing
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://www.musicnotes.com/download/mnviewer.cab
    O16 - DPF: {22D4879A-92DB-470D-8A83-E158797D8176} (Liquid.LiquidHelper) - file://E:\components\Liquid.ocx
    O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.c...b?1098529031559
    O16 - DPF: {A82C3A33-5C0E-466C-B020-71585433A7E4} (PhxStudent.OeSetup15) - https://ecampus.wintu.edu/secure/PhxStudent15.CAB
     
  13. Couriant

    Couriant Trusted Advisor

    Joined:
    Mar 26, 2002
    Messages:
    32,472
    First Name:
    James
    you still have the spyware that I saw in your previous thread

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.couldnotfind.com/search_...ount_id=1001693
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.couldnotfind.com/search_...ount_id=1001693
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.couldnotfind.com/search_...ount_id=1001693
    F2 - REG:system.ini: Shell=explorer.exe winsock2.exe
    F3 - REG:win.ini: run=c:\fvault.exe
    O2 - BHO: ADP UrlCatcher Class - {F4E04583-354E-4076-BE7D-ED6A80FD66DA} - C:\WINDOWS\System32\msbe.dll
    O4 - HKLM\..\Run: [Z8anInA] C:\WINDOWS\ktarn.exe
    O10 - Broken Internet access because of LSP provider 'bmi_lsp.dll' missing
    O16 - DPF: {22D4879A-92DB-470D-8A83-E158797D8176} (Liquid.LiquidHelper) - file://E:\components\Liquid.ocx
     
  14. biggrobbstud

    biggrobbstud Thread Starter

    Joined:
    Dec 9, 2004
    Messages:
    187
    thanks but the problem is that i cant get to my programs...specifically hijack to get anything off. do u think if i could get rid of this spyware it would solve my problem
     
  15. Couriant

    Couriant Trusted Advisor

    Joined:
    Mar 26, 2002
    Messages:
    32,472
    First Name:
    James
    most likely

    You will need to run CWShredder too as well as Ad-Aware and Spybot.
     
  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/325090

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice