1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

XP disk defragmenter not working

Discussion in 'Windows XP' started by dhh1213, Feb 16, 2005.

Thread Status:
Not open for further replies.
Advertisement
  1. dhh1213

    dhh1213 Thread Starter

    Joined:
    Mar 17, 2004
    Messages:
    135
    Logfile of HijackThis v1.99.1
    Scan saved at 2:50:29 PM, on 2/16/2005
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\carpserv.exe
    C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
    C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
    C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-us\msnappau.exe
    C:\Program Files\Microsoft IntelliPoint\point32.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\WINDOWS\System32\qttask.exe
    C:\WINDOWS\System32\UMonit2k.exe
    C:\WINDOWS\System32\igfxtray.exe
    C:\WINDOWS\System32\hkcmd.exe
    C:\WINDOWS\System32\WINAMP6.EXE
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Microsoft Office\Office\OSA.EXE
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Documents and Settings\David Harvey\Local Settings\Temporary Internet Files\Content.IE5\IM3LPRPJ\HijackThis[1].exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://my.netzero.net/s/search?r=minisearch
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://my.netzero.net/s/search?r=minisearch
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://red.clientapps.yahoo.com/customize/ie/defaults/stp/ymsgr*http://my.yahoo.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://red.clientapps.yahoo.com/customize/ie/defaults/su/ymsgr6/*http://www.yahoo.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cus.../*http://www.yahoo.com/ext/search/search.html
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/ie/defaults/sp/ymsgr6/*http://www.yahoo.com
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapps.yahoo.com/customize/ie/defaults/stp/ymsgr*http://my.yahoo.com
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://my.netzero.net/s/search?r=minisearch
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R3 - URLSearchHook: (no name) - _{37D2CDBF-2AF4-44AA-8113-BD0D2DA3C2B8} - (no file)
    R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)
    O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn1\ycomp5_5_7_0.dll
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-us\msntb.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn1\ycomp5_5_7_0.dll
    O4 - HKLM\..\Run: [CARPService] carpserv.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
    O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
    O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
    O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-us\msnappau.exe"
    O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
    O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaEngineMain
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
    O4 - HKLM\..\Run: [QuickTime Task] C:\WINDOWS\System32\qttask.exe
    O4 - HKLM\..\Run: [Gene USB Monitor] C:\WINDOWS\System32\UMonit2k.exe
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
    O4 - HKLM\..\Run: [Winamp Player 6] WINAMP6.EXE
    O4 - HKLM\..\Run: [MSConfig] C:\Documents and Settings\David Harvey\Desktop\hope.com.exe /auto
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\RunOnce: [Winamp Player 6] WINAMP6.EXE
    O4 - Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
    O4 - Global Startup: Microsoft Office Fast Start.lnk = C:\MSOffice\Office\FASTBOOT.EXE
    O4 - Global Startup: Microsoft Office Shortcut Bar.lnk = C:\WINDOWS\system32\VISX.EXE
    O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZS
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
    O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
    O9 - Extra button: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Program Files\ICQ\ICQ.exe
    O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Program Files\ICQ\ICQ.exe
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
    O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O14 - IERESET.INF: START_PAGE_URL=http://www.emachines.com
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab28578.cab
    O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight Class) - http://download.zonelabs.com/bin/free/cm/ICSCM.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1093348777140
    O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - http://launch.gamespyarcade.com/software/launch/alaunch.cab
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
    O16 - DPF: {88D758A3-D33B-45FD-91E3-67749B4057FA} (Sinstaller Class) - http://dm.screensavers.com/dm/installers/si/1/sinstaller.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
    O16 - DPF: {9E17A5F9-2B9C-4C66-A592-199A4BA1FBC8} (AIM UPF Control) - http://pictures04.aim.com/ygp/aol/plugin/upf/AOLUPF.en-US-AIM.9.5.1.6.cab
    O16 - DPF: {A243F6C2-34D2-4549-BCCD-A7BEF759B236} (Seekford Solutions, Inc.'s ssiPictureUploader Control) - http://img.funtigo.com/images/uploader/ssiPictureUploader.cab
    O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab28578.cab
    O16 - DPF: {B942A249-D1E7-4C11-98AE-FCB76B08747F} (RealArcadeRdxIE Class) - http://games-dl.real.com/gameconsole/Bundler/CAB/RealArcadeRdxIE.cab
    O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
    O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
    O16 - DPF: {FF65677A-8977-48CA-916A-DFF81B037DF3} - http://download.overpro.com/WildApp.cab
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
     
  2. Bob Cerelli

    Bob Cerelli

    Joined:
    Nov 2, 2002
    Messages:
    22,468
    If Defrag starts and closes, MSCONFIG starts and closes, try the same running REGEDIT.

    If this also fails you have either a virus, spyware or both.
     
  3. bradly

    bradly

    Joined:
    Feb 10, 2005
    Messages:
    773
    This entry is a virus:
    C:\WINDOWS\System32\WINAMP6.EXE

    If possible, boot into safe mode with networking (if you are on high speed) and go here to do the free scan: http://housecall.trendmicro.com/

    (Go to housecall in normal mode if you can't do it with safe mode)

    If it finds any "uncleanable's", write down the path and file names of each.
    Post them back here.
     
  4. Bob Cerelli

    Bob Cerelli

    Joined:
    Nov 2, 2002
    Messages:
    22,468
    That's exactly why I suggested the virus scan. There's a fair amount of suspicious entries there to suggest that and a spyware scan.

    Looks like you have AVG already installed. Have you gotten updates and done a scan yet?
     
  5. bradly

    bradly

    Joined:
    Feb 10, 2005
    Messages:
    773
    oops, sorry about repeating what was already suggested (for some reason I thought I was still on page one). My bad ;)
     
  6. Bob Cerelli

    Bob Cerelli

    Joined:
    Nov 2, 2002
    Messages:
    22,468
    Actually it was in the post directly above yours.
     
  7. dhh1213

    dhh1213 Thread Starter

    Joined:
    Mar 17, 2004
    Messages:
    135
    I have run trendmicro's Housecall scanner it found as uncleanable:

    C drive Troj Drop A.
    C drive Troj Drop A.

    F drive (addtl hard drive) Piter-N.O
    F drive (addtl hard drive) Joke Clickme.A

    I deleted these (supposedly) not sure they disappeared when I clicked delete but the scanner already said they were uncleable........

    I then ran Trendmicro's housecall again (C drive only) with restore points enabled--Clean No Viruses
    and again (C drive only)with restore points suspended. Clean---No viruses both times.

    I have been running Ad Aware, Spybot search and destroy, and Spywareblaster not to mention AVG, and continuely
    update these for the past year and find it hard to believe something slipped through all that protection. So I am still at the point of Regedit will not run, along with Msconfig and Defrag. Should I reboot into Safe mode with networking as one of the previous posts stated and then run Housecall again or should I go a different direction? Thanks again for everyones help!
     
  8. Bob Cerelli

    Bob Cerelli

    Joined:
    Nov 2, 2002
    Messages:
    22,468
    Sounds like you need to use a better antivirus program.
     
  9. bradly

    bradly

    Joined:
    Feb 10, 2005
    Messages:
    773
  10. dhh1213

    dhh1213 Thread Starter

    Joined:
    Mar 17, 2004
    Messages:
    135
    here is the results of autoruns:

    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit

    + C:\WINDOWS\system32\userinit.exe Userinit Logon Application Microsoft Corporation c:\windows\system32\userinit.exe

    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell

    + Explorer.exe Windows Explorer Microsoft Corporation c:\windows\explorer.exe

    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

    + AVG7_CC AVG Control Center (Not verified) GRISOFT, s.r.o. c:\program files\grisoft\avg free\avgcc.exe

    + AVG7_EMC AVG E-Mail Scanner (Not verified) GRISOFT, s.r.o. c:\program files\grisoft\avg free\avgemc.exe

    + CapFax Surveillance Capture Fax (Not verified) BVRP Software c:\program files\classic phonetools\capfax.exe

    + CARPService carpserv Conexant Systems c:\windows\system32\carpserv.exe

    + Gene USB Monitor Gene USB Monitor (Not verified) General c:\windows\system32\umonit2k.exe

    + HotKeysCmds hkcmd Module Intel Corporation c:\windows\system32\hkcmd.exe

    + IgfxTray igfxTray Module Intel Corporation c:\windows\system32\igfxtray.exe

    + IntelliPoint Point32.exe (Not verified) Microsoft Corporation c:\program files\microsoft intellipoint\point32.exe

    + iTunesHelper iTunesHelper Module (Not verified) Apple Computer, Inc. c:\program files\itunes\ituneshelper.exe

    + msnappau MSN Updater (Not verified) Microsoft Corporation c:\program files\msn apps\updater\01.02.3000.1001\en-us\msnappau.exe

    + NeroCheck NeroCheck (Not verified) Ahead Software Gmbh c:\windows\system32\nerocheck.exe

    + QuickTime Task c:\windows\system32\qttask.exe

    + SunJavaUpdateSched c:\program files\java\j2re1.4.2_04\bin\jusched.exe

    + TkBellExe RealNetworks Scheduler (Not verified) RealNetworks, Inc. c:\program files\common files\real\update_ob\realsched.exe

    + ViewMgr ViewMgr Viewpoint Corporation c:\program files\viewpoint\viewpoint manager\viewmgr.exe

    + WildTangent CDA File not found: C:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll
     
  11. dhh1213

    dhh1213 Thread Starter

    Joined:
    Mar 17, 2004
    Messages:
    135
    Process PID CPU Description Company Name
    System Idle Process 0 95.52
    Interrupts n/a Hardware Interrupts
    DPCs n/a Deferred Procedure Calls
    System 4
    smss.exe 432 Windows NT Session Manager Microsoft Corporation
    csrss.exe 488 Client Server Runtime Process Microsoft Corporation
    winlogon.exe 512 Windows NT Logon Application Microsoft Corporation
    services.exe 556 2.99 Services and Controller app Microsoft Corporation
    svchost.exe 736 Generic Host Process for Win32 Services Microsoft Corporation
    svchost.exe 792 Generic Host Process for Win32 Services Microsoft Corporation
    svchost.exe 936 Generic Host Process for Win32 Services Microsoft Corporation
    svchost.exe 972 Generic Host Process for Win32 Services Microsoft Corporation
    spoolsv.exe 1140 Spooler SubSystem App Microsoft Corporation
    avgamsvr.exe 1308 AVG Alert Manager GRISOFT, s.r.o.
    avgupsvc.exe 1320 AVG Update Service GRISOFT, s.r.o.
    svchost.exe 1392 Generic Host Process for Win32 Services Microsoft Corporation
    wdfmgr.exe 1424 Windows User Mode Driver Manager Microsoft Corporation
    iPodService.exe 1576 iPodService Module Apple Computer, Inc.
    lsass.exe 568 LSA Shell (Export Version) Microsoft Corporation
    explorer.exe 768 1.49 Windows Explorer Microsoft Corporation
    jusched.exe 964
    ViewMgr.exe 1004 ViewMgr Viewpoint Corporation
    msnappau.exe 1028 MSN Updater Microsoft Corporation
    point32.exe 1044 Point32.exe Microsoft Corporation
    avgcc.exe 1060 AVG Control Center GRISOFT, s.r.o.
    avgemc.exe 1092 AVG E-Mail Scanner GRISOFT, s.r.o.
    iTunesHelper.exe 1216 iTunesHelper Module Apple Computer, Inc.
    qttask.exe 1232
    UMonit2K.exe 828 Gene USB Monitor General
    igfxtray.exe 1384 igfxTray Module Intel Corporation
    hkcmd.exe 1344 hkcmd Module Intel Corporation
    Winamp6.exe 1668
    carpserv.exe 1924 carpserv Conexant Systems
    msnmsgr.exe 1852 MSN Messenger Microsoft Corporation
    OSA.EXE 2008
    iexplore.exe 1148 Internet Explorer Microsoft Corporation
    procexp.exe 3796 Sysinternals Process Explorer Sysinternals

    Process: Procexp Pid: -2

    Type Name
     
  12. bradly

    bradly

    Joined:
    Feb 10, 2005
    Messages:
    773
    Ok, I see C:\WINDOWS\System32\WINAMP6.EXE is still running.

    Do this:
    1. Run the "hope.com" [msconfig], click on the Startup Tab and uncheck all unneeded programs (Usually you only need your antivirus and firewall, and maybe any ISP softare running).
    2. Click on the BOOT.INI tab, and check "/Safeboot", then Apply, then Close. Have it boot into safe mode.

    3. While in safe mode, navigate to the System32 folder. Now in the explore window, click Tools-Folder Options-View --- make sure "show hidden files and folders" is checked, and also uncheck "hide protected OS files".

    4. Find WINAMP6.EXE in the system32 folder and deleted it (if you can't delete it, let me know).

    5. Navigate to C:\Documents and Settings\[username]\Local Settings and delete everything in the "TEMP" and "Temporary Internet Files" folders.
    Do this for EVERY profile.

    6. Click START-RUN and type in "CMD". Now navigate to "C:\windows\downloaded program files" using the "cd" command.
    When here, type in "del *" and enter. Type "y" to delete everything [they are just active x controls which you can get back when needed].

    7. Empty Recycle Bin.

    8. See if REGEDIT will work (if not, just copy it from C:\windows to your desktop, and rename it to "anything.com").
    First, create a backup of the registry, just in case. Highlight "my computer" then FILE - EXPORT and save it in your documents.
    Now, highlight "my computer" and then click on EDIT - FIND, and type in WINAMP6.EXE. Delete all keys that reference this file, pressing F3 to continue the search.
    **NOTE: if you find WINAMP6.EXE grouped with another file (ie. Explorer.exe) just deleted the WINAMP6.EXE part... if you are unsure of any, copy them all down and post them here for instructions.

    9. Go back into MSCONFIG, click on the BOOT.INI tab, and uncheck /Safeboot.

    10 Restart your computer.

    Try running regedit and msconfig through the RUN command. If they still won't run, post me a new hijackthis log.
     
  13. dhh1213

    dhh1213 Thread Starter

    Joined:
    Mar 17, 2004
    Messages:
    135
    Bradly,

    While working on step 5. going thru each user, I was sucessful deleting temp files on my own user, and also my wife, but not on my son, or my daughter's username. I got the message "access denied" when trying to access them. I did notice though, that my childrens usernames were a subdirectory of others, but that mine and my wife's were not. In other words, Kyle's username was a subdirectory of my wifes username, and Rachel"s username was a subdirectory of "owner". Now where do I go from here? :confused:
     
  14. bradly

    bradly

    Joined:
    Feb 10, 2005
    Messages:
    773
    Ok, just continue with the steps.
    As your computer boots up normally, log into the children's profiles and delete those files in the folders.

    So continue to step 6.
     
  15. dhh1213

    dhh1213 Thread Starter

    Joined:
    Mar 17, 2004
    Messages:
    135
    OK, the closest thing to C:\windows\downloaded program files is
    C:\windows\downloaded installations and I cant navigate to it, how do you
    navigate to directories with spaces in the names?
     
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/331228

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice