PDA

View Full Version : Startup



LilAznAccommodator
08-18-2004, 11:27 PM
Hmm after I formmated my computer because of strange issues. . . I get one single little thing that bugs me whenever I boot up I recieve this:

Title: Caution
Message: You are attempting to open a file of type 'Application Extension' (.dll)


These files are used by the operating system and by various programs. Editing or modifying them could damage your system.

If you still want to open the file, click Open With, otherwise, click Cancel

And than, there are the choices, Open With... / Cancel


Not really sure what is casuing it to have that message since I check what programs boot up on start-up and theyy don't seem to really be the cause. . .

Anyone happen to have any ideas?

tesco
08-18-2004, 11:59 PM
scan for viruses and spyware.

iMartin
08-19-2004, 12:12 AM
Start -> Run -> MSCONFIG -> Startup -> And uncheck anything that looks suspecious.

LilAznAccommodator
08-19-2004, 12:24 AM
Already did those and nothing, everythign seems "A-ok", but yeah...

LilAznAccommodator
08-19-2004, 01:33 AM
Sorry for the Double Post, but I thought I would give a HiJackThis Log and see if that would help... I still having the same problem.. . .


Logfile of HijackThis v1.97.7
Scan saved at 6:37:12 PM, on 8/18/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\ProfileAMP\Profile8.exe
C:\Program Files\Webroot\PopUpWasher\PopUpWasher.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Chris La\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mail.yahoo.com/
F0 - system.ini: Shell=Explorer.exe systemdll.dll
F2 - REG:system.ini: Shell=Explorer.exe systemdll.dll
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {4A3A071E-F913-4eee-AE15-AEFFA16FB6BC} - C:\WINDOWS\PopUpWasher21.dll
O4 - HKLM\..\Run: [DeadAIM] rundll32.exe "C:\Program Files\AIM\\DeadAIM.ocm",ExportedCheckODLs
O4 - HKLM\..\Run: [Accelerate] C:\Program Files\Webroot\Accelerate\accelerate.exe /S
O4 - HKCU\..\Run: [ProfileAMP] C:\Program Files\ProfileAMP\Profile8
O4 - HKCU\..\Run: [PopUpWasher] C:\Program Files\Webroot\PopUpWasher\PopUpWasher.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: Research (HKLM)
O9 - Extra button: AIM (HKLM)
O16 - DPF: {19E28AFC-EAE3-4CE5-AC83-2407B42F57C9} (MSSecurityAdvisor Class) - http://download.microsoft.com/download/0/5...b?1092815078718 (http://download.microsoft.com/download/0/5/c/05c905f4-dd30-427d-a3de-373c3e5552fc/msSecAdv.cab?1092815078718)
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) - http://office.microsoft.com/officeupdate/content/opuc.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co...b?1092814197575 (http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1092814197575)
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} - http://v4.windowsupdate.microsoft.com/CAB/...8217.0206828704 (http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38217.0206828704)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub/shock...ash/swflash.cab (http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab)

Jg427
08-19-2004, 03:39 AM
Hijackthis should be moved inside it's own folder. It makes backup copies that will be stored there. You can leave it on the desktop but make a new folder for it like ...Desktop\HJT\HijackThis.exe


Close all browsers and open windows, run hijackthis, check the following and click fix:


F0 - system.ini: Shell=Explorer.exe systemdll.dll
F2 - REG:system.ini: Shell=Explorer.exe systemdll.dll


If needed change your settings to show hidden files and folders
This file does not show a path, so run a search and delete if you find it: systemdll.dll


There is a newer version of hijackthis.
If your problem persists, download it, reboot and post a new log.

Download from one of these locations:
http://tools.radiosplace.com/HijackThis.exe
http://www.downloads.subratam.org/hijackthis.zip
http://spywarewarrior.com/files/HijackThis.exe

LilAznAccommodator
08-19-2004, 04:29 AM
Thanks a bunch, that helped me, wow I guess HiJackThis realyl is helpful ^_^