Please review this HJT log

By Farmer Ted
Oct 8, 2005
  1. Thanks a lot in advance!

    Attached Files:

  2. Spike

    Spike TS Evangelist Posts: 2,168

    You may want to download LSPFix beforehand, but...

    Boot into Safe Mode, disable system restore.

    download and run LSPFix from
    1. Run LSPFix.
    2. Check 'I know what I'm doing'.
    3. Select 'mdnsnsp.dll'
    4. Click the right-pointing arrow (moves it to the "remove" page).
    5. Click 'Finished'.

    Go to start -> run and type the following lines then hit enter one at a time...
    regsvr32 /u c:\program files\bonjour\mdnsnsp.dll
    regsvr32 /u C:\WINDOWS\system32\ssqrr.dll

    Open task manager and end the following processes if present...

    run HJT again and let it fix any of the following should they exist...

    C:\Program Files\Bonjour\mDNSResponder.exe
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local.,
    O2 - BHO: MSEvents Object - {6DD0BC06-4719-4BA3-BEBC-FBAE6A448152} - C:\WINDOWS\system32\ssqrr.dll
    O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
    O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
    O20 - Winlogon Notify: ssqrr - C:\WINDOWS\system32\ssqrr.dll
    O23 - Service: Bonjour Service - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

    delete the following files and directories and remove them from the recycle bin...
    c:\program files\bonjour\mdnsnsp.dll - remove directory in bold
    C:\Program Files\Bonjour\mDNSResponder.exe - remove directory in bold

    turn system restore back on and reboot. run HJT again and post a new log so we can see if it's got it all.
  3. Farmer Ted

    Farmer Ted TS Rookie Topic Starter

    Thanks for all your help so far!

    Unfortunately, I think my problem might be a little more difficult to fix. I ran LSPFix and removed "mdnsnsp.dll". That worked fine.

    I then tried to enter the "regsvr32 /u c:\program files\bonjour\mdnsnsp.dll" command, but it wouldn't let me. It said "LoadLibrary("c:\program") failed - The specified module could not be found". I even tried looking for it myself by showing all hidden files and looking for it manually, but I saw the other files in the "bonjour" folder and not that one. I spell-checked the command to make sure I was typing it right, and I even made little variations, but it still wouldn't work. I typed the same command for "regsvr32 /u c:\WINDOWS\system32\ssqrr.dll, and that one worked fine (I'm assuming). All I know is that it said something succeeded, and I clicked on "OK" afterward.

    I went ahead and continued, hoping that I could still go on without that one step. I ended the tasks you told me to using the task manager. I fixed everything you asked when I ran HJT again.

    I tried deleting the "bonjour" folder, but it wouldn't let me because it said the "mdnsnsp.dll" file was running. Even when I couldn't even see it in the folder with all hidden files viewable. I also could not find "ssqrr.dll" after looking in the system32 folder for about 10 minutes. I WAS able to locate the ps2.exe file and delete it, but I did notice a file next to that also said ps2. The only difference is that the icon had a little gear in the middle, and when I checked to see what type of file it was, it said it was a "MS-DOS Batch File". Is this something that should concern me?

    I started to go through the whole process again to see if something's wrong. I ran LSPFix again, but "mdnsnsp.dll" wasn't there anymore. I looked for the two items in the task manager, and they weren't there (they were also missing the first time I went through this step so I think this is normal). I ran HJT again, and it seems that most of what I tried to fix came back.

    Is there anything else I can try to fix this? Again, I really appreciate you taking the time to help me out.
  4. Spike

    Spike TS Evangelist Posts: 2,168

    I'm terribly sorry. I may have screwed up the order in which I told you to do things.

    Most of the nasties I mentioned the first time around seem to have gone from your HJT file, although I note that you didn't fix ALL 016 entries (because I forgot to tell you too! :blush:

    anyways, go to start -> run -> type cmd and press enter. Try the following...

    at the command prompt, type regsvr32 /u C:\WINDOWS\system32\ssqrr.dll and hit enter.

    then, at the command line, type erase c:\windows\system32\ssqrr.txt and hit enter.

    If the latter of these two commands didn't work, try them in Safe Mode. If they do work, run HJT and fix the following 2 entries if present, and while you're there, fix ALL 016 entries...

    O2 - BHO: MSEvents Object - {6DD0BC06-4719-4BA3-BEBC-FBAE6A448152} - C:\WINDOWS\system32\ssqrr.dll
    20 - Winlogon Notify: ssqrr - C:\WINDOWS\system32\ssqrr.dll

    Also, with that ps2.bat, is your keyboard a hewlett packard one?

    sorry about the mess :dead:
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...