shassouneh
Hi All,
After a lengthy serach on google, and NTCompatible, I was unable to find a fix that worked for me. First things first, here's a screen shot of what is going on:
Please note: I am NOT having the "blank Calendar" problem. See the screen shot!
That being said, here is a list of things i HAVE tried, none of which have fixed my problem (NOTE: I AM logged in as an administrator (of course).)
1.) Restore Registry keys accordingn to Microsoft Knowledge Base articles dealing with "Blank" Calendars. NOTE: I am NOT having a Blank Calendar problem. System Resotre doesn't even GET as far as showing me a calendar
2.) Tried regsvr32 for jscript.dll, vbscript.dll, and mshtml by running the following batch file:
<Some .BAT File>
@Echo Off
regsvr32 jscript
regsvr32 vbscript
regsvr32 /i mshtml
</Some .BAT File>
On All 3 of them, I got a message that says registered succesfully. I RESTARTED, but still not fixed!!!!
3.) Tried Restarting into Safe Mode and trying System Restore
4.) Tried Last Known Good Configuration, and trying System Restore
5.) Tried to manually check registry keys suggested by Microsoft that have to do with System Restore / Help / Search not working. After a painful set of browsing the registry, all the keys are in place with the right values!
6.) NET START (it shows the System Restore Service As Running)
7.) Disable / Enable / Restart System Restore Service (through Services under Administrative Tools)
8.) Disable System Restore on All Drives. Restart. Enable System Restore on Drives
9.) Ran System File Checker as such:
Start -> Run ->
sfc /scannow
It ran through, checked everything, and then it did not ask me to repair anything (so I assume everything is OK)
10.) SP2: Service Pack 2 comes pre-packaged with my Win XP CD, so I did not install it manually. I have seen various mentions of people trying to un-install SP2 to see if it helps. I am not at all convinced SP2 has anything to do with it, but I just thought I'd mention it.
11.) chkdsk /F C:\
C:\ is where Windows resides (my System partition). This of course asks to restart to gain exclusive access to the drive. I restarted, ran CHKDSK, everything is in order
----------------------------------------------------------------------------------------------------------------------------------
The only thing i have NOT tried is to do a full-fledged repair. I am reluctant to do this because:
a.) It takes too long. The only thing that does NOT work on my machine is system restore
b.) Since ONLY System Restore is not working, I do NOT wish to re-install updates. Its far too much trouble to do that just for something as small as system restore
Just to be Clear:
OS: Microsoft Windows XP Professional w / SP2
ALL the latest critical updates from Microsoft
This has me baffled. I seem to have tried everything short of of a format/repair, but cannot get this to work. Can Anyone help?
PS: Sorry if this is in the wrong section, but I could not find a section more suited for this.
[Edited by shassouneh on 2005-12-30 11:50:49]
[Edited by shassouneh on 2005-12-30 11:52:03]
[Edited by shassouneh on 2005-12-30 11:54:12]
[Edited by shassouneh on 2005-12-30 12:29:26]
After a lengthy serach on google, and NTCompatible, I was unable to find a fix that worked for me. First things first, here's a screen shot of what is going on:
Please note: I am NOT having the "blank Calendar" problem. See the screen shot!
That being said, here is a list of things i HAVE tried, none of which have fixed my problem (NOTE: I AM logged in as an administrator (of course).)
1.) Restore Registry keys accordingn to Microsoft Knowledge Base articles dealing with "Blank" Calendars. NOTE: I am NOT having a Blank Calendar problem. System Resotre doesn't even GET as far as showing me a calendar
2.) Tried regsvr32 for jscript.dll, vbscript.dll, and mshtml by running the following batch file:
<Some .BAT File>
@Echo Off
regsvr32 jscript
regsvr32 vbscript
regsvr32 /i mshtml
</Some .BAT File>
On All 3 of them, I got a message that says registered succesfully. I RESTARTED, but still not fixed!!!!
3.) Tried Restarting into Safe Mode and trying System Restore
4.) Tried Last Known Good Configuration, and trying System Restore
5.) Tried to manually check registry keys suggested by Microsoft that have to do with System Restore / Help / Search not working. After a painful set of browsing the registry, all the keys are in place with the right values!
6.) NET START (it shows the System Restore Service As Running)
7.) Disable / Enable / Restart System Restore Service (through Services under Administrative Tools)
8.) Disable System Restore on All Drives. Restart. Enable System Restore on Drives
9.) Ran System File Checker as such:
Start -> Run ->
sfc /scannow
It ran through, checked everything, and then it did not ask me to repair anything (so I assume everything is OK)
10.) SP2: Service Pack 2 comes pre-packaged with my Win XP CD, so I did not install it manually. I have seen various mentions of people trying to un-install SP2 to see if it helps. I am not at all convinced SP2 has anything to do with it, but I just thought I'd mention it.
11.) chkdsk /F C:\
C:\ is where Windows resides (my System partition). This of course asks to restart to gain exclusive access to the drive. I restarted, ran CHKDSK, everything is in order
----------------------------------------------------------------------------------------------------------------------------------
The only thing i have NOT tried is to do a full-fledged repair. I am reluctant to do this because:
a.) It takes too long. The only thing that does NOT work on my machine is system restore
b.) Since ONLY System Restore is not working, I do NOT wish to re-install updates. Its far too much trouble to do that just for something as small as system restore
Just to be Clear:
OS: Microsoft Windows XP Professional w / SP2
ALL the latest critical updates from Microsoft
This has me baffled. I seem to have tried everything short of of a format/repair, but cannot get this to work. Can Anyone help?
PS: Sorry if this is in the wrong section, but I could not find a section more suited for this.
[Edited by shassouneh on 2005-12-30 11:50:49]
[Edited by shassouneh on 2005-12-30 11:52:03]
[Edited by shassouneh on 2005-12-30 11:54:12]
[Edited by shassouneh on 2005-12-30 12:29:26]
Participate on our website and join the conversation
This topic is archived. New comments cannot be posted and votes cannot be cast.
Responses to this topic
shassouneh
OP
Originally posted by Relic:
Quote:Doug Knox again. I don't know if it will help, but I do know it won't hurt.
http://www.dougknox.com/xp/scripts/fixwinxphelp.vbs
Ran It. It said it has fixed the damage done when I ran Easy Clean something (which i did NOT. I don't even have that thing installed). STILL A BLANK SCREEN!
PS: Help/Support was working fine. I only tried this in the interest of not leaving any possibilities untouched.
Quote:Doug Knox again. I don't know if it will help, but I do know it won't hurt.
http://www.dougknox.com/xp/scripts/fixwinxphelp.vbs
Ran It. It said it has fixed the damage done when I ran Easy Clean something (which i did NOT. I don't even have that thing installed). STILL A BLANK SCREEN!
PS: Help/Support was working fine. I only tried this in the interest of not leaving any possibilities untouched.
shassouneh
OP
Minor update:
Downloaded and Installed Windows Script 5.6. Rebooted.
STILL A BLANK SCREEN
Downloaded and Installed Windows Script 5.6. Rebooted.
STILL A BLANK SCREEN
Relic
Originally posted by shassouneh:
Quote:Originally posted by Relic:
Quote:Doug Knox again. I don't know if it will help, but I do know it won't hurt.
http://www.dougknox.com/xp/scripts/fixwinxphelp.vbs
Ran It. It said it has fixed the damage done when I ran Easy Clean something (which i did NOT. I don't even have that thing installed). STILL A BLANK SCREEN!
PS: Help/Support was working fine. I only tried this in the interest of not leaving any possibilities untouched.
Yeah, like you, I'm kinda grasping at straw here......
Quote:Originally posted by Relic:
Quote:Doug Knox again. I don't know if it will help, but I do know it won't hurt.
http://www.dougknox.com/xp/scripts/fixwinxphelp.vbs
Ran It. It said it has fixed the damage done when I ran Easy Clean something (which i did NOT. I don't even have that thing installed). STILL A BLANK SCREEN!
PS: Help/Support was working fine. I only tried this in the interest of not leaving any possibilities untouched.
Yeah, like you, I'm kinda grasping at straw here......
shassouneh
OP
Hey guys. Here's a thought. I run Spybot Search & Destroy occasionally. It has some sort of bult in IE protection that is supposed to block spyware (see atachment below). Perhaps this is somehow related? I would guess it might be, but the fact that i CAN run System Resotre Using IE (see # 3 above) kind of contradicts it.
johnmcmullan7
HI: I am new to all this! but just wanted to ask you if the service for system restore is turned on.??
shassouneh
OP
Originally posted by johnmcmullan7:
Quote:HI: I am new to all this! but just wanted to ask you if the service for system restore is turned on.??
Please check items 6 and 7 in the original post. System Restore service is indeed turned on, and I can now access System Restore through an indirect way by using IE.
Thanx for the suggestion though. I appreciate it
Quote:HI: I am new to all this! but just wanted to ask you if the service for system restore is turned on.??
Please check items 6 and 7 in the original post. System Restore service is indeed turned on, and I can now access System Restore through an indirect way by using IE.
Thanx for the suggestion though. I appreciate it
American Zombie
A friend had this problem and it was from one of the recent patches for Internet Explorer.
Not sure if you want to try this or not but here goes.
Go into add/remove programs and make sure the show updates box at the top is checked.
Find and remove Security Update for Windows XP (KB896688).
Not sure if you want to try this or not but here goes.
Go into add/remove programs and make sure the show updates box at the top is checked.
Find and remove Security Update for Windows XP (KB896688).
shassouneh
OP
Originally posted by American Zombie:
Quote:A friend had this problem and it was from one of the recent patches for Internet Explorer.
Not sure if you want to try this or not but here goes.
Go into add/remove programs and make sure the show updates box at the top is checked.
Find and remove Security Update for Windows XP (KB896688).
Actually, even THAT I did try. I dug around on google groups and several topics hinted this patch is the cause. So I said, what the heck. I removed the patch. Restarted, and it STILL showed a blank screen. So I re-installed it!
Thanx for the suggestion though. much appreciated :up:
Quote:A friend had this problem and it was from one of the recent patches for Internet Explorer.
Not sure if you want to try this or not but here goes.
Go into add/remove programs and make sure the show updates box at the top is checked.
Find and remove Security Update for Windows XP (KB896688).
Actually, even THAT I did try. I dug around on google groups and several topics hinted this patch is the cause. So I said, what the heck. I removed the patch. Restarted, and it STILL showed a blank screen. So I re-installed it!
Thanx for the suggestion though. much appreciated :up:
Wilhelmus
Try importing these to registry:
Quote:Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{fd589b7c-7ce0-11d3-b9e5-00c04f79e399}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}]
[HKEY_CLASSES_ROOT\CLSID\{fd589b7c-7ce0-11d3-b9e5-00c04f79e399}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{fd589b7c-7ce0-11d3-b9e5-00c04f79e399}]
"Compatibility Flags"=dword:00800000
Quote:Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{fd589b7c-7ce0-11d3-b9e5-00c04f79e399}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}]
[HKEY_CLASSES_ROOT\CLSID\{fd589b7c-7ce0-11d3-b9e5-00c04f79e399}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{fd589b7c-7ce0-11d3-b9e5-00c04f79e399}]
"Compatibility Flags"=dword:00800000
shassouneh
OP
Originally posted by Wilhelmus:
Quote:Try importing these to registry:
Quote:Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{fd589b7c-7ce0-11d3-b9e5-00c04f79e399}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}]
[HKEY_CLASSES_ROOT\CLSID\{fd589b7c-7ce0-11d3-b9e5-00c04f79e399}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{fd589b7c-7ce0-11d3-b9e5-00c04f79e399}]
"Compatibility Flags"=dword:00800000
I ran the reg file, and allowed it to modify the registry. Restarted. and Guess what, Holy Flying Cows with machineguns I STILL get a blank screen! (Anyone sensing how a problem so ridiculous is yet so annoying?)
Quote:Try importing these to registry:
Quote:Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{fd589b7c-7ce0-11d3-b9e5-00c04f79e399}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}]
[HKEY_CLASSES_ROOT\CLSID\{fd589b7c-7ce0-11d3-b9e5-00c04f79e399}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{fd589b7c-7ce0-11d3-b9e5-00c04f79e399}]
"Compatibility Flags"=dword:00800000
I ran the reg file, and allowed it to modify the registry. Restarted. and Guess what, Holy Flying Cows with machineguns I STILL get a blank screen! (Anyone sensing how a problem so ridiculous is yet so annoying?)
American Zombie
I am leaning toward this being a third party program problem changing a default setting.
Spybot is good but sometimes it goes overboard and tea timer is a useless use of resources.
Since you are being asked about running activeX then either a program is blocking or your internet security zones are at some custom setting.
Do you have the same problem in safe mode?
Spybot is good but sometimes it goes overboard and tea timer is a useless use of resources.
Since you are being asked about running activeX then either a program is blocking or your internet security zones are at some custom setting.
Do you have the same problem in safe mode?
shassouneh
OP
Originally posted by American Zombie:
Quote:I am leaning toward this being a third party program problem changing a default setting.
Spybot is good but sometimes it goes overboard and tea timer is a useless use of resources.
Since you are being asked about running activeX then either a program is blocking or your internet security zones are at some custom setting.
Do you have the same problem in safe mode?
Although this certainly is a possibility, I somehow get the feeling its not the cause. Call it a hunch.
I have this same problem in Last Known Good, and Safe modes (see original post!)
Thanx for the input. I really appreciate it.
Quote:I am leaning toward this being a third party program problem changing a default setting.
Spybot is good but sometimes it goes overboard and tea timer is a useless use of resources.
Since you are being asked about running activeX then either a program is blocking or your internet security zones are at some custom setting.
Do you have the same problem in safe mode?
Although this certainly is a possibility, I somehow get the feeling its not the cause. Call it a hunch.
I have this same problem in Last Known Good, and Safe modes (see original post!)
Thanx for the input. I really appreciate it.
Relic
Originally posted by shassouneh:
Quote:Originally posted by American Zombie:
Quote:I am leaning toward this being a third party program problem changing a default setting.
Spybot is good but sometimes it goes overboard and tea timer is a useless use of resources.
Since you are being asked about running activeX then either a program is blocking or your internet security zones are at some custom setting.
Do you have the same problem in safe mode?
Although this certainly is a possibility, I somehow get the feeling its not the cause. Call it a hunch.
I have this same problem in Last Known Good, and Safe modes (see original post!)
Thanx for the input. I really appreciate it.
Maybe AZ has something there?
Have you run "HiJackThis"?
http://www.tomcoyote.org/hjt/#Top
Could find something Spybot missed.
Quote:Originally posted by American Zombie:
Quote:I am leaning toward this being a third party program problem changing a default setting.
Spybot is good but sometimes it goes overboard and tea timer is a useless use of resources.
Since you are being asked about running activeX then either a program is blocking or your internet security zones are at some custom setting.
Do you have the same problem in safe mode?
Although this certainly is a possibility, I somehow get the feeling its not the cause. Call it a hunch.
I have this same problem in Last Known Good, and Safe modes (see original post!)
Thanx for the input. I really appreciate it.
Maybe AZ has something there?
Have you run "HiJackThis"?
http://www.tomcoyote.org/hjt/#Top
Could find something Spybot missed.
shassouneh
OP
OK Here is the HiJack This Log.
NOTE: I am in no way familiar with HiJack This. I am just posting the log here JUST to make sure i tried THAT too.
Quote:
Logfile of HijackThis v1.99.1
Scan saved at 11:16:13 PM, on 1/1/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\taskswitch.exe
C:\ramdef\ramdef.exe
C:\daemon\daemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Diskeeper_10\DkService.exe
C:\WINDOWS\system32\devldr32.exe
C:\Norton\Ghost\2003\GhostStartService.exe
c:\spysweeper\WRSSSDK.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
c:\RealVNC\WinVNC4.exe
C:\WINDOWS\system32\ZoneLabs\isafe.exe
C:\ZONEAL~1\MAILFR~1\mantispm.exe
C:\spysweeper\SpySweeper.exe
C:\Macromedia\Dreamweaver 8\Dreamweaver.exe
C:\Program Files\Adobe\Acrobat 7.0\Acrobat\Acrobat.exe
C:\DOCUME~1\SAMERH~1\LOCALS~1\Temp\Adobelm_Cleanup.0001
C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
C:\DOCUME~1\SAMERH~1\LOCALS~1\Temp\Adobelm_Cleanup.0001
C:\BitLord\BitLord.exe
C:\opera\Opera.exe
C:\trillian\trillian.exe
C:\dap\DAP.exe
C:\Documents and Settings\Samer Hassouneh\Desktop\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Samer Hassouneh
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {02DCA195-602B-4B1F-83FF-381B7E804BDB} - C:\WINDOWS\system32\HDBHO.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: XBTB00429 - {3FDE0CB5-619F-4227-8961-F2D7ED15B88E} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\spybot_search_n_destroy\SDHelper.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [Zone Labs Client] C:\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32\taskswitch.exe
O4 - HKLM\..\Run: [RAMDef] c:\ramdef\ramdef.exe -tray
O4 - HKLM\..\Run: [DAEMON Tools] "c:\daemon\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [spySweeper] "C:\spysweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Diskeeper_10\DkIcon.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: &Download with &DAP - C:\dap\dapextie.htm
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Download &all with DAP - C:\dap\dapextie2.htm
O8 - Extra context menu item: Download All Files by HiDownload - C:\HIDOWN~1\HDGetAll.htm
O8 - Extra context menu item: Download by HiDownload - C:\HIDOWN~1\HDGet.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Office\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Sothink SWF Catcher - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\java\jre\bin\npjpi150_06.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\java\jre\bin\npjpi150_06.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Office\OFFICE11\REFIEBAR.DLL
O9 - Extra button: HiDownload - {F4FBA929-A891-492C-A0F6-5C79CC4F1742} - C:\HIDOWN~1\hidownload.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1133594238120
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apache2 - Unknown owner - C:\PROGRA~1\Apache Group\Apache2\bin\Apache.exe" -k runservice (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: CA ISafe (CAISafe) - Computer Associates International, Inc. - C:\WINDOWS\system32\ZoneLabs\isafe.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Diskeeper_10\DkService.exe
O23 - Service: GhostStartService - Symantec Corporation - C:\Norton\Ghost\2003\GhostStartService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)
O23 - Service: MySQL - Unknown owner - C:\MySQL\bin\mysqld-nt".exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - c:\spysweeper\WRSSSDK.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - Unknown owner - c:\RealVNC\WinVNC4.exe" -service (file missing)
NOTE: I am in no way familiar with HiJack This. I am just posting the log here JUST to make sure i tried THAT too.
Quote:
Logfile of HijackThis v1.99.1
Scan saved at 11:16:13 PM, on 1/1/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\taskswitch.exe
C:\ramdef\ramdef.exe
C:\daemon\daemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Diskeeper_10\DkService.exe
C:\WINDOWS\system32\devldr32.exe
C:\Norton\Ghost\2003\GhostStartService.exe
c:\spysweeper\WRSSSDK.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
c:\RealVNC\WinVNC4.exe
C:\WINDOWS\system32\ZoneLabs\isafe.exe
C:\ZONEAL~1\MAILFR~1\mantispm.exe
C:\spysweeper\SpySweeper.exe
C:\Macromedia\Dreamweaver 8\Dreamweaver.exe
C:\Program Files\Adobe\Acrobat 7.0\Acrobat\Acrobat.exe
C:\DOCUME~1\SAMERH~1\LOCALS~1\Temp\Adobelm_Cleanup.0001
C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
C:\DOCUME~1\SAMERH~1\LOCALS~1\Temp\Adobelm_Cleanup.0001
C:\BitLord\BitLord.exe
C:\opera\Opera.exe
C:\trillian\trillian.exe
C:\dap\DAP.exe
C:\Documents and Settings\Samer Hassouneh\Desktop\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Samer Hassouneh
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {02DCA195-602B-4B1F-83FF-381B7E804BDB} - C:\WINDOWS\system32\HDBHO.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: XBTB00429 - {3FDE0CB5-619F-4227-8961-F2D7ED15B88E} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\spybot_search_n_destroy\SDHelper.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [Zone Labs Client] C:\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32\taskswitch.exe
O4 - HKLM\..\Run: [RAMDef] c:\ramdef\ramdef.exe -tray
O4 - HKLM\..\Run: [DAEMON Tools] "c:\daemon\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [spySweeper] "C:\spysweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Diskeeper_10\DkIcon.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: &Download with &DAP - C:\dap\dapextie.htm
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Download &all with DAP - C:\dap\dapextie2.htm
O8 - Extra context menu item: Download All Files by HiDownload - C:\HIDOWN~1\HDGetAll.htm
O8 - Extra context menu item: Download by HiDownload - C:\HIDOWN~1\HDGet.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Office\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Sothink SWF Catcher - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\java\jre\bin\npjpi150_06.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\java\jre\bin\npjpi150_06.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Office\OFFICE11\REFIEBAR.DLL
O9 - Extra button: HiDownload - {F4FBA929-A891-492C-A0F6-5C79CC4F1742} - C:\HIDOWN~1\hidownload.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1133594238120
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apache2 - Unknown owner - C:\PROGRA~1\Apache Group\Apache2\bin\Apache.exe" -k runservice (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: CA ISafe (CAISafe) - Computer Associates International, Inc. - C:\WINDOWS\system32\ZoneLabs\isafe.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Diskeeper_10\DkService.exe
O23 - Service: GhostStartService - Symantec Corporation - C:\Norton\Ghost\2003\GhostStartService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)
O23 - Service: MySQL - Unknown owner - C:\MySQL\bin\mysqld-nt".exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - c:\spysweeper\WRSSSDK.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - Unknown owner - c:\RealVNC\WinVNC4.exe" -service (file missing)
Relic
Minor, maybe: R3 - Default URLSearchHook is missing
Just a few important things there:
O2 - BHO: XBTB00429 - {3FDE0CB5-619F-4227-8961-F2D7ED15B88E} - (no file) not good
O23 - Service: Apache2 - Unknown owner - C:\PROGRA~1\Apache Group\Apache2\bin\Apache.exe" -k runservice (file missing) not good
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing) not good
O23 - Service: MySQL - Unknown owner - C:\MySQL\bin\mysqld-nt".exe (file missing) not good
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing) not good
O23 - Service: VNC Server Version 4 (WinVNC4) - Unknown owner - c:\RealVNC\WinVNC4.exe" -service (file missing) not good
Seems you have a lot of server files missing. Not good. Possibly this is the problem, hard for the server to access the computer if the files aren't there to let it in.
How do you fix that? I really don't know, but I do know that missing files are not a good thing.
Just a few important things there:
O2 - BHO: XBTB00429 - {3FDE0CB5-619F-4227-8961-F2D7ED15B88E} - (no file) not good
O23 - Service: Apache2 - Unknown owner - C:\PROGRA~1\Apache Group\Apache2\bin\Apache.exe" -k runservice (file missing) not good
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing) not good
O23 - Service: MySQL - Unknown owner - C:\MySQL\bin\mysqld-nt".exe (file missing) not good
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing) not good
O23 - Service: VNC Server Version 4 (WinVNC4) - Unknown owner - c:\RealVNC\WinVNC4.exe" -service (file missing) not good
Seems you have a lot of server files missing. Not good. Possibly this is the problem, hard for the server to access the computer if the files aren't there to let it in.
How do you fix that? I really don't know, but I do know that missing files are not a good thing.
shassouneh
OP
The funny part is the stuff marked as not good works flawlessly. Apache, RealVNC and MySQL are used daily with no problems whatsoever. I have not tried MS SQL and quite frankly don't want to until I absolutely have to.
Can anyone offer any insight on what to do next? 10x.
Can anyone offer any insight on what to do next? 10x.
Mosesix
I've just had the exact same problem as you, Shassouneh, and have been pulling my hair out trying to solve it.
In my despair I came across this page, but also remembered a similar problem I had once: I was getting a blank screen on the product activation page, which is pretty bad!
So I dug around for the solution I used back then and here it is:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q314935
It's a quick change of a registry value, an install of some stuff from the XP CD, and then a manual register of some java/vb stuff.
Although it's aimed at sorting out the problem for the activation screen, I've just tried it and, lo and behold, it's worked for the restore screen too!
Hopefully it works for you too - I've registered with this message board just to post this!
Good luck! And Happy New Year!
In my despair I came across this page, but also remembered a similar problem I had once: I was getting a blank screen on the product activation page, which is pretty bad!
So I dug around for the solution I used back then and here it is:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q314935
It's a quick change of a registry value, an install of some stuff from the XP CD, and then a manual register of some java/vb stuff.
Although it's aimed at sorting out the problem for the activation screen, I've just tried it and, lo and behold, it's worked for the restore screen too!
Hopefully it works for you too - I've registered with this message board just to post this!
Good luck! And Happy New Year!
shassouneh
OP
Originally posted by mosesix:
Quote:I've just had the exact same problem as you, Shassouneh, and have been pulling my hair out trying to solve it.
In my despair I came across this page, but also remembered a similar problem I had once: I was getting a blank screen on the product activation page, which is pretty bad!
So I dug around for the solution I used back then and here it is:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q314935
It's a quick change of a registry value, an install of some stuff from the XP CD, and then a manual register of some java/vb stuff.
Although it's aimed at sorting out the problem for the activation screen, I've just tried it and, lo and behold, it's worked for the restore screen too!
Hopefully it works for you too - I've registered with this message board just to post this!
Good luck! And Happy New Year!
Thank you for taking the time to register, and leave feedback to help me out. However, I'm afraid those instructions are VERY sloppy, and they did not help fix my problem. The very first step essentially says start up in VGA mode then try WPA (in our case System Restore), then restart windows XP. If you cna restart windows XP then you're good!!!!
Well I obviously can start Windows XP just fine. I even tried checking those registry keys and re-registering jscript and vbscript (which i have done so millions of times already).
STILL a blank Screen.
One other alternative is to do an in-place install, which microsoft has the audacity to call "repair". That is FAR too much work for a problem that is so pathetic as this. Essentially Re-Installing Windows JUST to fix System Restore is ridiculous.
Thank you for the valuable input, but I'm afraid It does not help me any
Quote:I've just had the exact same problem as you, Shassouneh, and have been pulling my hair out trying to solve it.
In my despair I came across this page, but also remembered a similar problem I had once: I was getting a blank screen on the product activation page, which is pretty bad!
So I dug around for the solution I used back then and here it is:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q314935
It's a quick change of a registry value, an install of some stuff from the XP CD, and then a manual register of some java/vb stuff.
Although it's aimed at sorting out the problem for the activation screen, I've just tried it and, lo and behold, it's worked for the restore screen too!
Hopefully it works for you too - I've registered with this message board just to post this!
Good luck! And Happy New Year!
Thank you for taking the time to register, and leave feedback to help me out. However, I'm afraid those instructions are VERY sloppy, and they did not help fix my problem. The very first step essentially says start up in VGA mode then try WPA (in our case System Restore), then restart windows XP. If you cna restart windows XP then you're good!!!!
Well I obviously can start Windows XP just fine. I even tried checking those registry keys and re-registering jscript and vbscript (which i have done so millions of times already).
STILL a blank Screen.
One other alternative is to do an in-place install, which microsoft has the audacity to call "repair". That is FAR too much work for a problem that is so pathetic as this. Essentially Re-Installing Windows JUST to fix System Restore is ridiculous.
Thank you for the valuable input, but I'm afraid It does not help me any
Sampson
Just on the chance that you tried to remove IE as you wanted to from one of your previous posts, perhaps you inadvertantly removed two files that you need for system restore that is actually part of IE:
%WinRoot%\System32\hlink.dll
and
%WinRoot%\pchealth\helpctr\binaries\pchshell.dll
%WinRoot%\System32\hlink.dll
and
%WinRoot%\pchealth\helpctr\binaries\pchshell.dll
shassouneh
OP
Originally posted by Sampson:
Quote:Just on the chance that you tried to remove IE as you wanted to from one of your previous posts, perhaps you inadvertantly removed two files that you need for system restore that is actually part of IE:%WinRoot%\System32\hlink.dll
and
%WinRoot%\pchealth\helpctr\binaries\pchshell.dll
Dear Sampson,
Thanx for the idea. No I did not remove IE. I am reluctant to remove/re-install IE, or to "repair" windows. This problem, although EXTREMELY annoying, is not worth the pains of a full-fledged repair or installation/re-installation of IE.
That being said, I did check for those files you mentioned. They are in place, and have not been removed.
NOTE: Please do bear in mind that I CAN run system restore indirectly (by launching IE and manually typing "res://C:\WINDOWS\system32\Restore\rstrui.exe/srui-main.htm" in the address bar and approving some ActiveX warnings). I even created a restore point to check if it was working. However, I still WANT system restore to work as its SUPPOSED to.
Please keep the feedback coming folks. I appreciate every word of it!
Quote:Just on the chance that you tried to remove IE as you wanted to from one of your previous posts, perhaps you inadvertantly removed two files that you need for system restore that is actually part of IE:%WinRoot%\System32\hlink.dll
and
%WinRoot%\pchealth\helpctr\binaries\pchshell.dll
Dear Sampson,
Thanx for the idea. No I did not remove IE. I am reluctant to remove/re-install IE, or to "repair" windows. This problem, although EXTREMELY annoying, is not worth the pains of a full-fledged repair or installation/re-installation of IE.
That being said, I did check for those files you mentioned. They are in place, and have not been removed.
NOTE: Please do bear in mind that I CAN run system restore indirectly (by launching IE and manually typing "res://C:\WINDOWS\system32\Restore\rstrui.exe/srui-main.htm" in the address bar and approving some ActiveX warnings). I even created a restore point to check if it was working. However, I still WANT system restore to work as its SUPPOSED to.
Please keep the feedback coming folks. I appreciate every word of it!
