Hijackthis log posted

Status
Not open for further replies.
I've been getting some popups lately, and a nasty error message. I think it says something to the effect of: 'There are not enough system resources available to complete the task' when I try to open up anything. This only happens if my computer has been on a while. I've run Norton Antivirus, Spybot, and Adaware, both in regular windows and in safe mode and I can't get rid of this. I'm running WinXP Professional with SP2.

Thanks,
Travis
 
Follow these instructions EXACTLY.
Read: How to remove Begin2Search/Coolwebsearch and Other Nasties

When you get to the HJT problems, pay attention to these:

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - Global Startup: Bo-Shot.lnk = C:\Program Files\Bo-Shot\Bo-Shot.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O9 - Extra button: Royal Vegas Poker - {FA4904B4-1FAF-4afd-886C-C19D2297BA62} - C:\Program Files\royalvegasMPP\MPPoker.exe
O15 - ProtocolDefaults: 'http' protocol is in Trusted Zone, should be Internet Zone (HKLM)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1101320102171
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {9FC5238F-12C4-454F-B1B5-74599A21DE47} (Webshots Photo Uploader) - http://community.webshots.com/html/WSPhotoUploader.CAB
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
O16 - DPF: {CC05BC12-2AA2-4AC7-AC81-0E40F83B1ADF} -
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)
 
Thanks for the help. I did what that said, and I think it is somewhat better. I have attached the updated HJT logfile. Note that ViewMgr and all the O16's reinstalled themselves, as well as the SQLserver. I know the Bo-shot is not bad, just a screenshot program. I am wondering if I sohuld uninstall the SQLserver from my computer, but I'm not sure if it's necessary. I tried everything to get rid of viewpoint and it still came back, I removed it from add and remove programs and deleted the HJT and program file portions of it. Anyway, please let me know if there's still problems with this. I haven't had any problems yet since removing these but I haven't been on long either.

Thanks,
Travis
 
You may as well uninstall that SQLserver, can't think why you need it.

First Read: Only use these HJT-instructions when asked!
/P/ Process needs to be stopped
/U/ UNinstall anything to do with this
The text between the dotted lines underneath goes between the dotted lines of that post.
Make sure to follow ALL instructions, and in HJT tick/fix ALL lines!
...................................................................................................
/P/U/ O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} -
O16 - DPF: {9FC5238F-12C4-454F-B1B5-74599A21DE47} -
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} -
O16 - DPF: {CC05BC12-2AA2-4AC7-AC81-0E40F83B1ADF} -
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)
...................................................................................................
 
I did as it said. ViewMgr wasn't running and when I went to uninstall it told me it was already uninstalled. The O16's still came back, as did the SQL and Viewpoint. I have been getting this error on startup and shutdown, and random times in between:

CATMNETI.EXE - Application Error
The instruction at "0x000001c7" referenced memory at "0x000001c7". The memory could not be "read".

or

CATMNETI.EXE - Application Error
The instruction at "0x100058a1" referenced memory at "0xb8e98295". The memory could not be "written".

I am still getting popups and internet explorer errors, and I'm about to just give up and reformat. Please let me know if there's anything else I can do.

Thanks,
Travis
 
Installed and ran ewido. Posted are the results from that scan and an updated HJT log. I don't think that got them, but I haven't had any problems yet.

Thanks,
Travis
 
The odd one out is still this Bo-shot program.
Uninstall it, and try again to do the fixes as in post #4.
You can always re-install it if it makes no difference.

In Windows Explorer, turn on "show all files and folders, including hidden and system". See how here.
Then do a Find for that CATMNETI.EXE
 
Status
Not open for further replies.
Back