Page 2 of 3 FirstFirst 123 LastLast
Results 11 to 20 of 21

Thread: Windows Messenger Acting Up

  1. 03-20-2005, 05:09 PM #11
    SideSwiped
    SideSwiped is offline
    SideSwiped's Avatar LB 3880
    Join Date
    Feb 2003
    Location
    Florida
    Age
    53
    Posts
    153
    Check in msconfig, if it's not a second instance, then, NAV just reactivated the start up. And yeah, NAV is a resource hog, always has been, but it's a good AV for all that. AVG is okay as a secondary AV, but I would still go with Kapersky or even keep NAV. Btw, are you using just the AV from norton or the entire system works suite?
    Reply With Quote Reply With Quote
  3. 03-20-2005, 06:36 PM Software & Hardware   -   #12
    peat moss
    peat moss is offline
    peat moss's Avatar Software Farmer BT Rep: +15BT Rep +15BT Rep +15
    Join Date
    May 2003
    Location
    Delta B.C. Canada
    Posts
    10,547
    It is also a virus .

    http://www.auditmypc.com/process/msmsgs.asp


    Don't mean to say you have it. Just a thought . Many spyware/malware programs use filenames of usual, non-malware programs.
    Last edited by peat moss; 03-20-2005 at 06:42 PM.
    Reply With Quote Reply With Quote
  5. 03-20-2005, 10:17 PM Software & Hardware   -   #13
    numba1xclusive
    numba1xclusive is offline
    numba1xclusive's Avatar Xclusive Gangsta
    Join Date
    Jan 2004
    Posts
    208
    I had to delete Msmsgs off the startup list using the regcleaner prgm. I thought it was gone using msconfig, apparently not. Would Msmsgs interfere with dialup prgms?

    Da Numba1Xclusive King
    Reply With Quote Reply With Quote
  7. 03-20-2005, 10:37 PM Software & Hardware   -   #14
    peat moss
    peat moss is offline
    peat moss's Avatar Software Farmer BT Rep: +15BT Rep +15BT Rep +15
    Join Date
    May 2003
    Location
    Delta B.C. Canada
    Posts
    10,547
    I have a question , Could you post a hijackthis log in this post ?

    http://www.download.com/3000-8022-10227353.html

    Not for me but others may see something .
    Last edited by peat moss; 03-20-2005 at 10:39 PM.
    Reply With Quote Reply With Quote
  9. 03-21-2005, 04:43 PM Software & Hardware   -   #15
    numba1xclusive
    numba1xclusive is offline
    numba1xclusive's Avatar Xclusive Gangsta
    Join Date
    Jan 2004
    Posts
    208
    Here it is

    Logfile of HijackThis v1.98.2
    Scan saved at 11:25:58 AM, on 3/21/2005
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Microsoft IntelliPoint\point32.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\WINDOWS\System32\drivers\CDAC11BA.EXE
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
    C:\WINDOWS\System32\nvsvc32.exe
    C:\Program Files\Norton AntiVirus\SAVScan.exe
    C:\WINDOWS\system32\ssoftsrv.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\explorer.exe
    C:\Program Files\Windows Media Player\wmplayer.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\AIM\aim.exe
    C:\WINDOWS\system32\taskmgr.exe
    C:\Documents and Settings\Kedar\Desktop\HijackThis.exe
    C:\Program Files\Messenger\msmsgs.exe

    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
    O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC
    O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
    O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
    O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [DeadAIM] rundll32.exe "C:\Program Files\AIM\\DeadAIM.ocm",ExportedCheckODLs
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
    O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15009/CTSUEng.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?link...67&clcid=0x409
    O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/sh...3/mcinsctl.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1094246344062
    O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/sh...20/mcgdmgr.cab
    O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15009/CTPID.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{0EB741FD-0F84-4119-9AA0-45CD6915C269}: NameServer = 165.87.194.244 165.87.201.244
    O17 - HKLM\System\CS1\Services\Tcpip\..\{0EB741FD-0F84-4119-9AA0-45CD6915C269}: NameServer = 165.87.194.244 165.87.201.244
    Attached Files Attached Files
    Last edited by numba1xclusive; 03-21-2005 at 04:45 PM.

    Da Numba1Xclusive King
    Reply With Quote Reply With Quote
  11. 03-21-2005, 04:46 PM Software & Hardware   -   #16
    numba1xclusive
    numba1xclusive is offline
    numba1xclusive's Avatar Xclusive Gangsta
    Join Date
    Jan 2004
    Posts
    208
    Most of those regkeys seem like innocent prgms.
    Last edited by numba1xclusive; 03-21-2005 at 04:51 PM.

    Da Numba1Xclusive King
    Reply With Quote Reply With Quote
  13. 03-21-2005, 09:26 PM Software & Hardware   -   #17
    tesco
    tesco is offline
    tesco's Avatar woowoo
    Join Date
    Aug 2003
    Location
    Canadia
    Posts
    21,669
    I doubt it's related but fix this:
    O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
    Reply With Quote Reply With Quote
  15. 03-21-2005, 09:55 PM Software & Hardware   -   #18
    RealitY
    RealitY is offline
    RealitY's Avatar SP MngR
    Join Date
    Apr 2003
    Posts
    8,945
    I used this on many pc and it seems to work at stoping that shit from loading with IE and OE as well...
    Copy this code:

    RunDll32 advpack.dll,LaunchINFSection %windir%\INF\msmsgs.inf,BLC.Remove

    Go to Start - Run - CTRL+V
    You could check out the file Ive attched also.
    Attached Files Attached Files
    Last edited by RealitY; 03-21-2005 at 09:56 PM.
    Reply With Quote Reply With Quote
  17. 03-22-2005, 12:57 AM Software & Hardware   -   #19
    peat moss
    peat moss is offline
    peat moss's Avatar Software Farmer BT Rep: +15BT Rep +15BT Rep +15
    Join Date
    May 2003
    Location
    Delta B.C. Canada
    Posts
    10,547
    Quote Originally Posted by rossco
    I doubt it's related but fix this:
    O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)



    And whats this ?

    C:\WINDOWS\system32\ssoftsrv.exe
    Reply With Quote Reply With Quote
  19. 03-22-2005, 01:57 AM Software & Hardware   -   #20
    tesco
    tesco is offline
    tesco's Avatar woowoo
    Join Date
    Aug 2003
    Location
    Canadia
    Posts
    21,669
    Quote Originally Posted by peat moss
    And whats this ?

    C:\WINDOWS\system32\ssoftsrv.exe
    dunno. didnt notice that before.

    fix that too.
    Reply With Quote Reply With Quote
Page 2 of 3 FirstFirst 123 LastLast
« Previous Thread | Next Thread »

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules

Page Generation Time
0.04
Number of Queries
14
Links: Talkgold Forum | AdServices