TechSpot

Hijackthis log posted

By tb4601
Oct 28, 2005
  1. I've been getting some popups lately, and a nasty error message. I think it says something to the effect of: 'There are not enough system resources available to complete the task' when I try to open up anything. This only happens if my computer has been on a while. I've run Norton Antivirus, Spybot, and Adaware, both in regular windows and in safe mode and I can't get rid of this. I'm running WinXP Professional with SP2.

    Thanks,
    Travis
     
  2. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 6,503

    Follow these instructions EXACTLY.
    Read: How to remove Begin2Search/Coolwebsearch and Other Nasties

    When you get to the HJT problems, pay attention to these:

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - Default URLSearchHook is missing
    O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
    O4 - Global Startup: Bo-Shot.lnk = C:\Program Files\Bo-Shot\Bo-Shot.exe
    O4 - Global Startup: hp psc 1000 series.lnk = ?
    O9 - Extra button: Royal Vegas Poker - {FA4904B4-1FAF-4afd-886C-C19D2297BA62} - C:\Program Files\royalvegasMPP\MPPoker.exe
    O15 - ProtocolDefaults: 'http' protocol is in Trusted Zone, should be Internet Zone (HKLM)
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1101320102171
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
    O16 - DPF: {9FC5238F-12C4-454F-B1B5-74599A21DE47} (Webshots Photo Uploader) - http://community.webshots.com/html/WSPhotoUploader.CAB
    O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
    O16 - DPF: {CC05BC12-2AA2-4AC7-AC81-0E40F83B1ADF} -
    O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)
     
  3. tb4601

    tb4601 TS Rookie Topic Starter

    Thanks for the help. I did what that said, and I think it is somewhat better. I have attached the updated HJT logfile. Note that ViewMgr and all the O16's reinstalled themselves, as well as the SQLserver. I know the Bo-shot is not bad, just a screenshot program. I am wondering if I sohuld uninstall the SQLserver from my computer, but I'm not sure if it's necessary. I tried everything to get rid of viewpoint and it still came back, I removed it from add and remove programs and deleted the HJT and program file portions of it. Anyway, please let me know if there's still problems with this. I haven't had any problems yet since removing these but I haven't been on long either.

    Thanks,
    Travis
     
  4. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 6,503

    You may as well uninstall that SQLserver, can't think why you need it.

    First Read: Only use these HJT-instructions when asked!
    /P/ Process needs to be stopped
    /U/ UNinstall anything to do with this
    The text between the dotted lines underneath goes between the dotted lines of that post.
    Make sure to follow ALL instructions, and in HJT tick/fix ALL lines!
    ...................................................................................................
    /P/U/ O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} -
    O16 - DPF: {9FC5238F-12C4-454F-B1B5-74599A21DE47} -
    O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} -
    O16 - DPF: {CC05BC12-2AA2-4AC7-AC81-0E40F83B1ADF} -
    O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)
    ...................................................................................................
     
  5. tb4601

    tb4601 TS Rookie Topic Starter

    I did as it said. ViewMgr wasn't running and when I went to uninstall it told me it was already uninstalled. The O16's still came back, as did the SQL and Viewpoint. I have been getting this error on startup and shutdown, and random times in between:

    CATMNETI.EXE - Application Error
    The instruction at "0x000001c7" referenced memory at "0x000001c7". The memory could not be "read".

    or

    CATMNETI.EXE - Application Error
    The instruction at "0x100058a1" referenced memory at "0xb8e98295". The memory could not be "written".

    I am still getting popups and internet explorer errors, and I'm about to just give up and reformat. Please let me know if there's anything else I can do.

    Thanks,
    Travis
     
  6. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 6,503

  7. tb4601

    tb4601 TS Rookie Topic Starter

    Installed and ran ewido. Posted are the results from that scan and an updated HJT log. I don't think that got them, but I haven't had any problems yet.

    Thanks,
    Travis
     
  8. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 6,503

    The odd one out is still this Bo-shot program.
    Uninstall it, and try again to do the fixes as in post #4.
    You can always re-install it if it makes no difference.

    In Windows Explorer, turn on "show all files and folders, including hidden and system". See how here.
    Then do a Find for that CATMNETI.EXE
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...