View Full Version : operating problem or virus?
Schmidtsds
December 1st, 2002, 06:50 AM
I am having problems trying to access different part of web pages. When I try to click on a page within a web site many time I will get a blank page or the page will never load. I am also getting illegal operation messages that will shut my games down or kick mew offline when I try to close the Message
AnnMarie
December 1st, 2002, 07:04 AM
Hi Schmidtsds - welcome to CTH. To eliminate a virus as the cause of your problems, go here (http://www.pandasecurity.com/Disinfect.asp?ID=36) and run the free online scanner. Choose to disinfect and disable your own AV before your start the scan. Post back and let us know how you got on.
Schmidtsds
December 1st, 2002, 07:14 AM
when I click the link I get an arrow with the hourglass and the page won't load
Schmidtsds
December 1st, 2002, 07:28 AM
Okay I finally got there by copying the web address then pasting it up top. After that I had to IM myself the address to get to the download. Got it downloaded but when asked if I wanted to run the program I got an illegal operation message and thus kicked offline. Going back to retry I guess.------Retried now getting error while trying to download active scan.
AnnMarie
December 1st, 2002, 07:52 AM
Ok, we will try another tack. Go here (http://www.spywareinfo.com/files/startuplist.zip) and download and run Startup List. It will generate a log file. Copy and paste the log back in this thread. You may have to halve it and make two posts.
Schmidtsds
December 1st, 2002, 07:59 AM
Tried to run it from its location as well as tried to save it. Went into acrobat reader 3.0 both times and gave me this message "There was an error opening documnet. File does not start with '%PDF"
AnnMarie
December 1st, 2002, 08:06 AM
Hmmm, Acrobat shouldnt open. Its not a .pdf file. Try rightclicking on it and choose "Save Target As" . Does it download now?
Schmidtsds
December 1st, 2002, 08:13 AM
Tried Right clicking can't get to anything that says "Save target as"---Should I restart and try all the stuff again?
AnnMarie
December 1st, 2002, 08:16 AM
OK..how long has this been going on? Have you tried a System Restore?
AnnMarie
December 1st, 2002, 08:18 AM
Ooops, sorry Schmidtsds, you have Win98. I would like to know how long you have had this problem though.
Schmidtsds
December 1st, 2002, 08:26 AM
I had some problems before. I ended up uninstalling windows and reinstalling about a month ago. I had the problem previously but now it seems much worse. After I uninstalled it went away for a couple weeks but now its back and really ******* me off. All the links you give me will not load unless I copy and paste the addresses. I have to do the same thing if I want to browse websites. i.e. check out the specifics of product xyz
tb525
December 1st, 2002, 08:26 AM
Try this, Click Start > Run > type msinfo32 and click OK
When the System Information utility opens,
Click Software Enviroment then Startup Programs
Click edit, select all, edit, copy and then paste it in a reply.
Schmidtsds
December 1st, 2002, 08:29 AM
EPSON Background Monitor Startup Group C:\ESM2\Stms.exe
America Online 7.0 Tray Icon Startup Group "C:\Program Files\America Online 7.0\aoltray.exe" -check
Microsoft Find Fast Startup Group "C:\Program Files\Microsoft Office\Office\FINDFAST.EXE"
Office Startup Startup Group "C:\Program Files\Microsoft Office\Office\OSA.EXE" -b
Greetings Workshop Reminders Startup Group "C:\Program Files\Greetings Workshop\GWREMIND.EXE"
Windows Guardian Startup Group "C:\Program Files\the HelpSpot!\Fawgrd32.exe" /STARTUP
Microsoft Office Shortcut Bar Startup Group "C:\Program Files\Microsoft Office\Office\MSOFFICE.EXE"
Taskbar Display Controls Registry (Per-User Run) RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY
Reminder Registry (Per-User Run) C:\Program Files\Microsoft Money\System\reminder.exe
ScanRegistry Registry (Machine Run) C:\WINDOWS\scanregw.exe /autorun
TaskMonitor Registry (Machine Run) C:\WINDOWS\taskmon.exe
SystemTray Registry (Machine Run) SysTray.Exe
MMHID Registry (Machine Run) rundll32 mmhid.dll,StartMmHid
LoadPowerProfile Registry (Machine Run) Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
EnsoniqMixer Registry (Machine Run) starter.exe
VsecomrEXE Registry (Machine Run) C:\Program Files\Network Associates\McAfee VirusScan\VSECOMR.EXE
VSchedule Registry (Machine Run) C:\Program Files\Network Associates\McAfee VirusScan\VSCHED.EXE
Vshwin32EXE Registry (Machine Run) C:\Program Files\Network Associates\McAfee VirusScan\VSHWIN32.EXE
VoyetraTray Registry (Machine Run) C:\PROGRAM FILES\VOYETRA\AUDIOSTATION2\VTRAY.EXE /s
Multi-function Keyboard Registry (Machine Run) GWHotKey.exe
RealTray Registry (Machine Run) C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
LoadPowerProfile Registry (Machine Service) Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
SchedulingAgent Registry (Machine Service) mstask.exe
winmodem Registry (Machine Service) WINMODEM.101\wmexe.exe
Vshwin32EXE Registry (Machine Service) C:\Program Files\Network Associates\McAfee VirusScan\VSHWIN32.EXE
AnnMarie
December 1st, 2002, 08:47 AM
Well, there is nothing there that I can see that would cause your problem. Can you please post your error message (or messages) in full.
Schmidtsds
December 1st, 2002, 08:51 AM
I can't quite remember what the message was. But lemme give it a shot: "This device has performed an illegal operation. This program will now shut down" Two options detail and cancel---I don't get any error messages when the pages fail to load however. I either get a blank page or an eternity of the hour glass and the page will never load in either case when I close the window that address is never listed up top in the "what-ya-ma-whose-it" up top that list all your latest web page visits. Acts as if I never went there.
AnnMarie
December 1st, 2002, 09:00 AM
Good try Schmidtsds :D We really need the name of the program that is causing the illegal operation.
You could try this:
Close IE and go to Start > Run, and run the following commands one after the other, each line followed by 'enter':
regsvr32 shdocvw.dll
regsvr32 urlmon.dll
regsvr32 comcat.dll
regsvr32 actxprxy.dll
regsvr32 Oleaut32.dll
regsvr32 Mshtml.dll
regsvr32 shdoc401.dll (win95/98)
Run each line individually. After each run, you should see a short message stating the command was successful. Now reboot.
Are you still having problems?
Schmidtsds
December 1st, 2002, 09:20 AM
Ok....I ran all of them as you typed them and they all succeded except for the last one. So I took the (win95/98) and then it too succeded. Rebooted but no dice.......
AnnMarie
December 1st, 2002, 09:25 AM
regsvr32 shdoc401.dll - Is this the one that didnt succeed? if not can you please tell us which one.
Schmidtsds
December 1st, 2002, 09:34 AM
regsvr32 shdoc401.dll (win95/98) did not succeed with (win95/98) attatched at the end. regsvr32 shdoc401.dll succeded
AnnMarie
December 1st, 2002, 09:37 AM
OK, thats fine. Try posting this link in your address bar
http://download.microsoft.com/download/msninvestor/Patch/1.0/WIN98/EN-US/mcrepair.EXE
and see if you can download and run mcrepair.exe
When it prompts you whether you wish to overwrite Newer files, make sure to click YES for each file.
*EDIT* you will have to reboot afterwards.
Schmidtsds
December 1st, 2002, 09:53 AM
worked like a champ. THANK YOU so very much. If your ever in south Louisiana I owe you big time Boiled crawfish, Mardi Gras, you got it. Probably saved me from buying a new computer cause I sure wanted to toss this one out the window. Again...Thank You..............Stewart Schmidt---------PS what did that repair anyway?
AnnMarie
December 1st, 2002, 09:56 AM
Crawfish sounds good ;)
I'm pleased that we solved your problem Stewart. Happy surfing :D
AnnMarie
December 1st, 2002, 10:18 AM
Sorry Stewart, I missed the last part of your post. Mcrepair.exe replaces dlls (Oleaut32.dll, Olepro32.dll, Asycfilt.dll and Stdole2.tlb) with Win98 versions. The original files had been overwritten by versions that were not compatible with your system during the installation of another program.
Schmidtsds
December 1st, 2002, 10:23 AM
Okay ----- I think I get it....Again thank you very much