1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

[Resolved] computer running wierd lately

Discussion in 'Earlier Versions of Windows' started by sweetcheekies, Jan 8, 2003.

Thread Status:
Not open for further replies.
Advertisement
  1. sweetcheekies

    sweetcheekies Thread Starter

    Joined:
    Aug 23, 2001
    Messages:
    1,218
    Okay here is my situation.. for some reason my computer has been running wierd lately .I run win 98 se and ie 6. I have tried everything i can think of to get it working again.. done the adaware, virus check etc.. with my adaware a new thing i havent seen before came up. msbb.exe ? what is that.. also i removed it with adaware anyways.. but i ran a check and i have msbb.dll is that needed? and from what i have looked up about msbb does the quartz.dll go with it? anyways.. if anyone can understand my gibberish and can help let me know here is my start up list in case its needed.

    StartupList report, 1/8/03, 1:02:09 PM
    StartupList version: 1.50
    Started from : C:\WINDOWS\DESKTOP\STARTUPLIST.EXE
    Detected: Windows 98 SE (Win9x 4.10.2222A)
    Detected: Internet Explorer v6.00 SP1 (6.00.2800.1106)
    * Using default options
    ==================================================

    Running processes:

    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\PROGRAM FILES\NOADS\NOADS.EXE
    C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
    C:\WINDOWS\SYSTEM\MSTASK.EXE
    C:\WINDOWS\SYSTEM\WMIEXE.EXE
    C:\WINDOWS\SYSTEM\DDHELP.EXE
    C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
    C:\WINDOWS\DESKTOP\STARTUPLIST.EXE

    --------------------------------------------------

    Autorun entries from Registry:
    HKLM\Software\Microsoft\Windows\CurrentVersion\Run

    SystemTray = SysTray.Exe
    ScanRegistry = C:\WINDOWS\scanregw.exe /autorun
    LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme

    --------------------------------------------------

    Autorun entries from Registry:
    HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

    LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme

    --------------------------------------------------

    Autorun entries from Registry:
    HKCU\Software\Microsoft\Windows\CurrentVersion\Run

    NoAds = "C:\PROGRAM FILES\NOADS\NOADS.EXE"

    --------------------------------------------------

    Enumerating Active Setup stub paths:
    HKLM\Software\Microsoft\Active Setup\Installed Components
    (* = disabled by HKCU twin)

    [{89820200-ECBD-11cf-8B85-00AA005B4383}] *
    StubPath = rundll32.exe advpack.dll,UserInstStubWrapper {89820200-ECBD-11cf-8B85-00AA005B4383}

    [>PerUser_MSN_Clean] *
    StubPath = C:\WINDOWS\msnmgsr1.exe

    [PerUser_LinkBar_URLs] *
    StubPath = C:\WINDOWS\COMMAND\sulfnbk.exe /L

    [{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] *
    StubPath = rundll32.exe advpack.dll,UserInstStubWrapper {44BBA840-CC51-11CF-AAFA-00AA00B6015C}

    [{7790769C-0471-11d2-AF11-00C04FA35D02}] *
    StubPath = rundll32.exe advpack.dll,UserInstStubWrapper {7790769C-0471-11d2-AF11-00C04FA35D02}

    [{9EF0045A-CDD9-438e-95E6-02B9AFEC8E11}] *
    StubPath = C:\WINDOWS\SYSTEM\updcrl.exe -e -u C:\WINDOWS\SYSTEM\verisignpub1.crl

    --------------------------------------------------

    Load/Run keys from C:\WINDOWS\WIN.INI:

    load=
    run=

    --------------------------------------------------

    Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

    Shell=explorer.exe
    SCRNSAVE.EXE=
    drivers=mmsystem.dll power.drv

    --------------------------------------------------

    Checking for EXPLORER.EXE instances:

    C:\WINDOWS\Explorer.exe: PRESENT!

    C:\Explorer.exe: not present
    C:\WINDOWS\Explorer\Explorer.exe: not present
    C:\WINDOWS\System\Explorer.exe: not present
    C:\WINDOWS\System32\Explorer.exe: not present
    C:\WINDOWS\Command\Explorer.exe: not present

    --------------------------------------------------

    C:\WINDOWS\WININIT.BAK listing:
    (Created 8/1/2003, 12:51:20)

    [Rename]
    NUL=C:\WINDOWS\SYSTEM\URLMON.DLL
    C:\WINDOWS\SYSTEM\URLMON.DLL=C:\WINDOWS\SYSTEM\SET3135.TMP
    NUL=C:\WINDOWS\SYSTEM\MSHTML.DLL
    C:\WINDOWS\SYSTEM\MSHTML.DLL=C:\WINDOWS\SYSTEM\SET3140.TMP
    NUL=C:\WINDOWS\SYSTEM\SHDOCVW.DLL
    C:\WINDOWS\SYSTEM\SHDOCVW.DLL=C:\WINDOWS\SYSTEM\SET3141.TMP

    --------------------------------------------------

    C:\AUTOEXEC.BAT listing:

    SET BLASTER=A220 I7 D1 H5 P330 T6
    SET CTSYN=C:\WINDOWS
    C:\PROGRA~1\CREATIVE\SBLIVE\DOSDRV\SBEINIT.COM

    --------------------------------------------------

    C:\CONFIG.SYS listing:

    DEVICE=C:\WINDOWS\HIMEM.SYS
    DEVICE=C:\WINDOWS\EMM386.EXE

    --------------------------------------------------

    C:\WINDOWS\DOSSTART.BAT listing:

    C:\PROGRA~1\CREATIVE\SBLIVE\DOSDRV\SBEINIT.COM

    --------------------------------------------------

    Checking for superhidden extensions:

    .lnk: HIDDEN! (arrow overlay: yes)
    .pif: HIDDEN! (arrow overlay: yes)
    .exe: not hidden
    .com: not hidden
    .bat: not hidden
    .hta: not hidden
    .scr: not hidden
    .shs: HIDDEN!
    .shb: HIDDEN!
    .vbs: not hidden
    .vbe: not hidden
    .wsh: not hidden
    .scf: HIDDEN! (arrow overlay: NO!)
    .url: HIDDEN! (arrow overlay: yes)
    .js: not hidden
    .jse: not hidden

    --------------------------------------------------

    Enumerating Browser Helper Objects:

    (no name) - C:\WINDOWS\SYSTEM\F1.DLL - {00000EF1-34E3-4633-87C6-1AA7A44296DA}
    BabeIE - (no file) - {00000000-0000-0000-0000-000000000000}

    --------------------------------------------------

    Enumerating Task Scheduler jobs:

    Tune-up Application Start.job
    Symantec NetDetect.job
    Windows Critical Update Notification.job

    --------------------------------------------------

    Enumerating Download Program Files:

    [CV3 Class]
    InProcServer32 = C:\WINDOWS\SYSTEM\WUV3IS.DLL
    CODEBASE = http://windowsupdate.microsoft.com/R1062/V31Controls/x86/w98/en/actsetup.cab

    [YInstStarter Class]
    InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\YINSTHELPER.DLL
    CODEBASE = http://download.yahoo.com/dl/installs/yinst.cab

    [YahooYMailTo Class]
    InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\YMMAPI.DLL
    CODEBASE = http://us.dl1.yimg.com/download.yahoo.com/dl/installs/essentials/ymmapi_0727.dll

    [Shockwave ActiveX Control]
    InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\DIRECTOR\SWDIR.DLL
    CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

    [Word Cubes Control]
    InProcServer32 = C:\WINDOWS\DOWNLO~1\WORDCUBE.OCX
    CODEBASE = http://mirror.worldwinner.com/games/v40/wordcube/wordcube.cab

    [Sol Control]
    InProcServer32 = C:\WINDOWS\DOWNLO~1\SOL.OCX
    CODEBASE = http://mirror.worldwinner.com/games/v40/sol/sol.cab

    [FreeCell Control]
    InProcServer32 = C:\WINDOWS\DOWNLO~1\FREECELL.OCX
    CODEBASE = http://mirror.worldwinner.com/games/v40/freecell/freecell.cab

    [GolfSol Control]
    InProcServer32 = C:\WINDOWS\DOWNLO~1\GOLFSOL.OCX
    CODEBASE = http://mirror.worldwinner.com/games/v41/golfsol/golfsol.cab

    [BJA Control]
    InProcServer32 = C:\WINDOWS\DOWNLO~1\BJA.OCX
    CODEBASE = http://mirror.worldwinner.com/games/v42/bjattack/bjattack.cab

    [Focus Control]
    InProcServer32 = C:\WINDOWS\DOWNLO~1\FOCUS.OCX
    CODEBASE = http://mirror.worldwinner.com/games/v40/focus/focus.cab

    [Hangman Control]
    InProcServer32 = C:\WINDOWS\DOWNLO~1\HANGMAN.OCX
    CODEBASE = http://mirror.worldwinner.com/games/v40/hangman/hangman.cab

    [Puzzle Control]
    InProcServer32 = C:\WINDOWS\DOWNLO~1\JIGSAW.OCX
    CODEBASE = http://mirror.worldwinner.com/games/v41/jigsaw/jigsaw.cab

    [Maze Control]
    InProcServer32 = C:\WINDOWS\DOWNLO~1\MAZE.OCX
    CODEBASE = http://mirror.worldwinner.com/games/v40/maze/maze.cab

    [Tilecity Control]
    InProcServer32 = C:\WINDOWS\DOWNLO~1\TILECITY.OCX
    CODEBASE = http://mirror.worldwinner.com/games/v40/tilecity/tilecity.cab

    [XWord Control]
    InProcServer32 = C:\WINDOWS\DOWNLO~1\XWORD.OCX
    CODEBASE = http://mirror.worldwinner.com/games/v40/xword/xword.cab

    [Darts Control]
    InProcServer32 = C:\WINDOWS\DOWNLO~1\DARTS.OCX
    CODEBASE = http://mirror.worldwinner.com/games/v40/darts/darts.cab

    [Pencil Wars Control]
    InProcServer32 = C:\WINDOWS\DOWNLO~1\TERRIT~1.OCX
    CODEBASE = http://mirror.worldwinner.com/games/v42/territory/territory.cab

    [DepHlp Control]
    InProcServer32 = C:\WINDOWS\DOWNLO~1\DEPHLP.OCX
    CODEBASE = http://www.worldwinner.com/games/shared/dephlp.cab

    [Ttt Control]
    InProcServer32 = C:\WINDOWS\DOWNLO~1\TTT.OCX
    CODEBASE = http://mirror.worldwinner.com//games/v40/ttt/ttt.cab

    [Trivia Control]
    InProcServer32 = C:\WINDOWS\DOWNLO~1\TRIVIA.OCX
    CODEBASE = http://mirror.worldwinner.com//games/v41/trivia/trivia.cab

    [Bash Control]
    InProcServer32 = C:\WINDOWS\DOWNLO~1\BASH.OCX
    CODEBASE = http://mirror.worldwinner.com/games/v40/bash/bash.cab

    [HouseCall Control]
    InProcServer32 = C:\WINDOWS\DOWNLO~1\XSCAN53.OCX
    CODEBASE = http://a840.g.akamai.net/7/840/537/2002121801/housecall.antivirus.com/housecall/xscan53.cab

    [CscClnt Class]
    InProcServer32 = C:\WINDOWS\DOWNLO~1\CSCCTRL.DLL
    CODEBASE = http://www.panel3.angusreid.com/central/02030105/cccabs/CleverContent.cab

    [Shockwave Flash Object]
    InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH.OCX
    CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

    [Yahoo! Webcam Viewer Wrapper]
    InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\YVWRCTL.DLL
    CODEBASE = http://chat.yahoo.com/cab/yvwrctl.cab

    [CRegistryDownload Class]
    InProcServer32 = C:\WINDOWS\SYSTEM\REGDLOAD.DLL
    CODEBASE = http://www.paltalk.com/prod/RegDload.CAB

    [QuickTime Object]
    InProcServer32 = C:\WINDOWS\SYSTEM\QTPLUGIN.OCX
    CODEBASE = http://www.apple.com/qtactivex/qtplugin.cab

    [{41F17733-B041-4099-A042-B518BB6A408C}]
    CODEBASE = http://apple.speedera.net/qtinstall.info.apple.com/borris/us/win/QuickTimeInstaller.exe

    [{459729AC-727D-4D97-B18A-72EE224EFEC0}]
    CODEBASE = http://defender.veloz.com/pub/download/scandl_adteg.cab

    [Update Class]
    InProcServer32 = C:\WINDOWS\SYSTEM\IUCTL.DLL
    CODEBASE = http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37591.5638078704

    [PWMediaSendControl Class]
    InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\PWACTIVEXIMGCTL.DLL
    CODEBASE = http://216.249.24.142/code/PWActiveXImgCtl.CAB

    [{8522F9B3-38C5-4AA4-AE40-7401F1BBC851}]
    CODEBASE = http://www.trinsic.org/download_serial.exe

    --------------------------------------------------
    End of report, 10,154 bytes
    Report generated in 0.639 seconds

    Command line options:
    /verbose - to add additional info on each section
    /complete - to include empty sections and unsuspicious data
    /force9x - to include Win9x-only startups even if running on WinNT
    /forcent - to include WinNT-only startups even if running on Win9x
    /forceall - to include all Win9x and WinNT startups, regardless of platform
    /history - to list version history only


    thanks if anyone sees anything weird please let me know ..

    sweetcheekies
     
  2. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    msbb.exe
    Advertising Spyware. http://www.web3000.com Secretely installed with many products. Displays random pop-up ads on your desktop

    You were lucky to get rid of this and preserve connectivity. The dll can be removed but not quartz.dll which is shared.

    You really should install and run Spybot, not Ad-aware these days, as it hasn't been updated in months pending a new version.

    You have BabieIE showing, and this needs to be removed. Spybot will do it. You also have many ActiveX objects in the Downloaded Programs Folder. I would remove all not associated with major vendors such as Microsoft, Macromedia and others which you know and trust. You can't make a mistake here. If you really need one at a visited site you will be re-prompted for a download. But just say "no" if you do not trust the site.

    http://tomcoyote.com/SPYBOT/

    Install, update, and run according to the directions provided in the link.
     
  3. sweetcheekies

    sweetcheekies Thread Starter

    Joined:
    Aug 23, 2001
    Messages:
    1,218
    okay ran the spybot.. wow did it ever find a ton of things.. way more that what adaware did just last night. I will post back if I have any more problems. so far it seems better. thanks again rollin

    sweet
     
  4. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    Will give you a tentative "resolved" then unless you post back. You are welcome as always :)
     
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/112124

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice