PDA

View Full Version : What is "WINOLDAP" and why is it suddenly appearing on my PC???


PreciousAngel
September 30th, 2002, 06:24 AM
When I pressed Ctrl+Alt+Del earlier on my computer, I saw that there was something called "Winoldap" running. I have never before seen this on my computer and I have never heard of it! Can someone please give me some info on this? My computer wasn't loading a page right...it was sort of stuck...so I did Ctrl+Alt+Del and it said that winoldap was not responding. When I ended the task, everything seemed ok. What IS this?

AnnMarie
September 30th, 2002, 07:28 AM
Hi PreciousAngel - according to this (http://ourworld.compuserve.com/homepages/r_harvey/q117742.htm) old Microsoft article, WINOLDAP is the MS-DOS prompt window.

If you are concerned about what might be running on your PC, go here (http://www.geocities.com/merijn_bellekom/new/files.html) and download and run Startup List. It will generate a text file that you can paste back in this thread. We will have a look at it for you.

PreciousAngel
October 2nd, 2002, 05:25 PM
StartupList report, 10/2/02, 9:05:30 AM
Detected: Windows 98 SE (Win9x 4.10.2222A)
* Using default options
==================================================

Running processes:

C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\VSHWIN32.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\VSSTAT.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\LOADQM.EXE
C:\WINDOWS\SYSTEM\IRMON.EXE
C:\WINDOWS\TASKMON.EXE
C:\PROGRAM FILES\SONY\1394\SCMON.EXE
C:\PROGRAM FILES\SONY\HOTKEY UTILITY\HKSERV.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\JUNO6\ZCAST.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\PROGRAM FILES\JUNO6\CHKRAS.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\UNZIPPED\STARTUPLIST\STARTUPLIST.EXE

--------------------------------------------------

Listing of startup folders:

Shell folders Startup:
[C:\WINDOWS\Start Menu\Programs\StartUp]
CompuServe 2000 Tray Icon.lnk = C:\CompuServe 2000\cstray.exe
PowerReg Scheduler.exe

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

SystemTray = SysTray.Exe
LoadQM = loadqm.exe
IrMon = IrMon.exe
McAfeeWebScanX = C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\WebScanX.exe
ScanRegistry = c:\windows\scanregw.exe /autorun
TaskMonitor = c:\windows\taskmon.exe
Smart Connect Monitor = C:\Program Files\Sony\1394\SCMon.exe
Smart Connect Setup = C:\Program Files\Sony\1394\SCSetup.exe -c
VsecomrEXE = C:\Program Files\Network Associates\McAfee VirusScan\VSEcomR.EXE
VsStatEXE = C:\Program Files\Network Associates\McAfee VirusScan\VSSTAT.EXE /SHOWWARNING
Vshwin32EXE = C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\VSHWIN32.EXE

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run Services

SchedulingAgent = mstask.exe
Vshwin32EXE = C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\VSHWIN32.EXE

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

HKserv.exe = C:\Program Files\Sony\HotKey Utility\HKserv.exe

--------------------------------------------------

File association entry for .EXE:
HKEY_CLASSES_ROOT\exefile\shell\open\command

(Default) = "%1" %*

--------------------------------------------------

File association entry for .COM:
HKEY_CLASSES_ROOT\comfile\shell\open\command

(Default) = "%1" %*

--------------------------------------------------

File association entry for .BAT:
HKEY_CLASSES_ROOT\batfile\shell\open\command

(Default) = "%1" %*

--------------------------------------------------

File association entry for .PIF:
HKEY_CLASSES_ROOT\piffile\shell\open\command

(Default) = "%1" %*

--------------------------------------------------

File association entry for .SCR:
*Registry key not found*

--------------------------------------------------

File association entry for .HTA:
HKEY_CLASSES_ROOT\htafile\shell\open\command

(Default) = C:\WINDOWS\SYSTEM\MSHTA.EXE "%1" %*

--------------------------------------------------

Enumerating Active Setup stub paths:
HKLM\Software\Microsoft\Active Setup\Installed Components

[{89820200-ECBD-11cf-8B85-00AA005B4383}]
StubPath = C:\WINDOWS\SYSTEM\IE4UINIT.EXE

[>PerUser_MSN_Clean]
StubPath = c:\windows\msnmgsr1.exe

[PerUser_LinkBar_URLs]
StubPath = c:\windows\COMMAND\sulfnbk.exe /L

[{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
StubPath = "C:\PROGRA~1\OUTLOO~1\setup50.exe" /APP:OE /CALLER:IE50 /user /install

[{7790769C-0471-11d2-AF11-00C04FA35D02}]
StubPath = "C:\PROGRA~1\OUTLOO~1\setup50.exe" /APP:WAB /CALLER:IE50 /user /install

[>IEPerUser]
StubPath = RUNDLL32.EXE IEDKCS32.DLL,BrandIE4 SIGNUP

[{9EF0045A-CDD9-438e-95E6-02B9AFEC8E11}]
StubPath = C:\WINDOWS\SYSTEM\updcrl.exe -e -u C:\WINDOWS\SYSTEM\verisignpub1.crl

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=Explorer.exe
SCRNSAVE.EXE=

--------------------------------------------------

Checking for EXPLORER.EXE instances:

C:\WINDOWS\Explorer.exe: PRESENT!

C:\Explorer.exe: not present
C:\WINDOWS\Explorer\Explorer.exe: not present
C:\WINDOWS\System\Explorer.exe: not present
C:\WINDOWS\System32\Explorer.exe: not present
C:\WINDOWS\Command\Explorer.exe: not present

--------------------------------------------------

C:\WINDOWS\WININIT.BAK listing:

[rename]
c:\windows\SYSTEM\inseng.dll=c:\windows\SYSTEM\ins eng.001
c:\windows\SYSTEM\javacypt.dll=c:\windows\SYSTEM\j avacypt.001
c:\windows\SYSTEM\msjava.dll=c:\windows\SYSTEM\msj ava.001
c:\windows\SYSTEM\vmhelper.dll=c:\windows\SYSTEM\v mhelper.001
c:\windows\SYSTEM\vbscript.dll=c:\windows\SYSTEM\v bscript.001
c:\windows\SYSTEM\shell32.dll=c:\windows\SYSTEM\sh ell32.001
c:\windows\SYSTEM\msnet32.dll=c:\windows\SYSTEM\ms net32.001
c:\windows\SYSTEM\NMGC5.drv=c:\windows\SYSTEM\NMGC 5.001

--------------------------------------------------

C:\AUTOEXEC.BAT listing:

C:\PROGRA~1\NETWOR~1\MCAFEE~1\SCAN.EXE C:\
@IF ERRORLEVEL 1 PAUSE
@SET CLASSPATH=C:\PROGRA~1\PHOTOD~1.1\ADOBEC~1

--------------------------------------------------

C:\WINDOWS\DOSSTART.BAT listing:

@echo off

--------------------------------------------------

Checking for superhidden extensions:

.lnk: HIDDEN! (arrow overlay: yes)
.pif: HIDDEN! (arrow overlay: yes)
.exe: not hidden
.com: not hidden
.bat: not hidden
.hta: not hidden
.scr: *Registry key not found*
.shs: HIDDEN!
.shb: HIDDEN!
.vbs: not hidden
.vbe: not hidden
.wsh: not hidden
.scf: *Registry key not found*
.url: HIDDEN! (arrow overlay: yes)
.js: not hidden
.jse: not hidden

--------------------------------------------------
End of report, 6,944 bytes
Report generated in 1.479 seconds

StartupList version: 1.30.0
Started from: C:\UNZIPPED\STARTUPLIST\STARTUPLIST.EXE

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

AnnMarie
October 3rd, 2002, 08:54 AM
Hi again PreciousAngel, the only entries that I was a little bit suspicious of are these.

Smart Connect Monitor = C:\Program Files\Sony\1394\SCMon.exe
Smart Connect Setup = C:\Program Files\Sony\1394\SCSetup.exe -c

I ran a search for SCMON.EXE but I only got two hits (one Russian and one Japanese). Do you have Smart Connect installed? If so then its fine. There is no trace of WINOLDAP and nothing else to worry about that I can see.

w1che
October 4th, 2002, 06:19 AM
Go to Start/Run..Type msconfig..When the window pops up at the top click on startup...If that program is listed there with a check mark beside it...click the check mark out..You don't need it running & that will shut it down for good.. You can also take out anything else you don't want running in the back ground there..Your computer will be happier for it..(:>)