Hopefully someone will have a solution to this problem:
For 3 days now my laptop has had a problem with explorer. It's running Windows 2000 Workstation Pro, and for some reason I can't open any type of folder from my desktop or listing. This only happens with the folders, such as My Computer, My Documents, Search, etc., as I am still able to run programs. When I click on an icon such as My Computer, I get an explorer error message that reads:
"Program Error: Explorer.exe has generated errors and will be closed by windows etc etc"
Once this happens, the desktop will go completely blank of icons and task bar as if it's refreshing itself, and then magically everything will appear again in a matter of seconds.
I've ran AVG, Spy Sweep, and Adaware with no luck. None of them are picking up anything, so I'm clueless as to what the problem is. I took a hijack this scan and got the following log:
Logfile of HijackThis v1.97.7
Scan saved at 4:46:07 PM, on 11/13/2004
Platform: Windows 2000 SP2 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\csrss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\slserv.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\wanmpsvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\mspmspsv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\PRISMSTA.EXE
C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe
C:\Program Files\Common
Files\Real\Update_OB\realsched.exe
C:\WINNT\system32\rundll32.exe
C:\Program Files\Webroot\Washer\wwDisp.exe
C:\Program Files\OLYMPUS\CAMEDIA Master
4.1\CM_camera.exe
C:\WINNT\system32\ntvdm.exe
C:\Program Files\America Online 7.0\waol.exe
C:\WINNT\sllights.exe
C:\Program Files\mIRC\mirc.exe
C:\WINNT\explorer.exe
C:\Documents and
Settings\Administrator\Desktop\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet
Explorer\Search,CustomizeSearch =
http://www.findin.org/
R1 - HKLM\Software\Microsoft\Internet
Explorer\Main,Default_Page_URL = about:blank
O2 - BHO: (no name) -
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program
Files\Adobe\Acrobat
5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: BHO - {06CAD548-14DD-4fa3-9EA9-05F83C18CBD7}
- C:\WINNT\system32\mspxs32.dll
O2 - BHO: (no name) -
{193FF3B5-F2EC-7143-05A3-086AA5519855} -
C:\WINNT\sysmg.dll (file missing)
O2 - BHO: (no name) -
{AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program
files\google\googletoolbar1.dll
O2 - BHO: (no name) -
{EA7FA13F-CB5D-4478-ADD9-4627A31B539C} -
C:\WINNT\system32\fih.dll
O2 - BHO: (no name) -
{F4E04583-354E-4076-BE7D-ED6A80FD66DA} -
C:\WINNT\System32\msbe.dll
O3 - Toolbar: &Radio -
{8E718888-423F-11D2-876E-00A0C9082467} -
C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: (no name) -
{ACB1E670-3217-45C4-A021-6B829A8A27CB} - (no file)
O3 - Toolbar: &Google -
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program
files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Synchronization Manager]
mobsync.exe /logon
O4 - HKLM\..\Run: [NeroCheck]
C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [AVG_CC]
C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common
Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [New.net Startup] rundll32
C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,NewDotNetStartup -s
O4 - HKCU\..\Run: [Window Washer] C:\Program
Files\Webroot\Washer\wwDisp.exe
O4 - HKCU\..\Run: [SpySweeper] "C:\Program
Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
O4 - Global Startup: CAMEDIA Master.lnk = C:\Program
Files\OLYMPUS\CAMEDIA Master 4.1\CM_camera.exe
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Real.com (HKLM)
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O12 - Plugin for .mov: C:\Program Files\Internet
Explorer\PLUGINS\npqtplugin.dll
O12 - Plugin for .spop: C:\Program Files\Internet
Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: *.searchmiracle.com
O15 - Trusted Zone: *.skoobidoo.com
O15 - Trusted Zone: *.tl81.com
O15 - Trusted Zone: *.windupdates.com
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F}
(Update Class) -
http://v4.windowsupdate.micros...l.CAB?37419.4133796296
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
(Shockwave Flash Object) -
http://download.macromedia.com...cabs/flash/swflash.cab
O17 -
HKLM\System\CCS\Services\Tcpip\..\{C5F5B308-DBDA-4FCF-84C0-6052FF86AC15}:
Any help would be greatly appreciated, since no one else seems to know what my problem is. : (
For 3 days now my laptop has had a problem with explorer. It's running Windows 2000 Workstation Pro, and for some reason I can't open any type of folder from my desktop or listing. This only happens with the folders, such as My Computer, My Documents, Search, etc., as I am still able to run programs. When I click on an icon such as My Computer, I get an explorer error message that reads:
"Program Error: Explorer.exe has generated errors and will be closed by windows etc etc"
Once this happens, the desktop will go completely blank of icons and task bar as if it's refreshing itself, and then magically everything will appear again in a matter of seconds.
I've ran AVG, Spy Sweep, and Adaware with no luck. None of them are picking up anything, so I'm clueless as to what the problem is. I took a hijack this scan and got the following log:
Logfile of HijackThis v1.97.7
Scan saved at 4:46:07 PM, on 11/13/2004
Platform: Windows 2000 SP2 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\csrss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\slserv.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\wanmpsvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\mspmspsv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\PRISMSTA.EXE
C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe
C:\Program Files\Common
Files\Real\Update_OB\realsched.exe
C:\WINNT\system32\rundll32.exe
C:\Program Files\Webroot\Washer\wwDisp.exe
C:\Program Files\OLYMPUS\CAMEDIA Master
4.1\CM_camera.exe
C:\WINNT\system32\ntvdm.exe
C:\Program Files\America Online 7.0\waol.exe
C:\WINNT\sllights.exe
C:\Program Files\mIRC\mirc.exe
C:\WINNT\explorer.exe
C:\Documents and
Settings\Administrator\Desktop\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet
Explorer\Search,CustomizeSearch =
http://www.findin.org/
R1 - HKLM\Software\Microsoft\Internet
Explorer\Main,Default_Page_URL = about:blank
O2 - BHO: (no name) -
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program
Files\Adobe\Acrobat
5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: BHO - {06CAD548-14DD-4fa3-9EA9-05F83C18CBD7}
- C:\WINNT\system32\mspxs32.dll
O2 - BHO: (no name) -
{193FF3B5-F2EC-7143-05A3-086AA5519855} -
C:\WINNT\sysmg.dll (file missing)
O2 - BHO: (no name) -
{AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program
files\google\googletoolbar1.dll
O2 - BHO: (no name) -
{EA7FA13F-CB5D-4478-ADD9-4627A31B539C} -
C:\WINNT\system32\fih.dll
O2 - BHO: (no name) -
{F4E04583-354E-4076-BE7D-ED6A80FD66DA} -
C:\WINNT\System32\msbe.dll
O3 - Toolbar: &Radio -
{8E718888-423F-11D2-876E-00A0C9082467} -
C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: (no name) -
{ACB1E670-3217-45C4-A021-6B829A8A27CB} - (no file)
O3 - Toolbar: &Google -
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program
files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Synchronization Manager]
mobsync.exe /logon
O4 - HKLM\..\Run: [NeroCheck]
C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [AVG_CC]
C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common
Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [New.net Startup] rundll32
C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,NewDotNetStartup -s
O4 - HKCU\..\Run: [Window Washer] C:\Program
Files\Webroot\Washer\wwDisp.exe
O4 - HKCU\..\Run: [SpySweeper] "C:\Program
Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
O4 - Global Startup: CAMEDIA Master.lnk = C:\Program
Files\OLYMPUS\CAMEDIA Master 4.1\CM_camera.exe
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Real.com (HKLM)
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O12 - Plugin for .mov: C:\Program Files\Internet
Explorer\PLUGINS\npqtplugin.dll
O12 - Plugin for .spop: C:\Program Files\Internet
Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: *.searchmiracle.com
O15 - Trusted Zone: *.skoobidoo.com
O15 - Trusted Zone: *.tl81.com
O15 - Trusted Zone: *.windupdates.com
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F}
(Update Class) -
http://v4.windowsupdate.micros...l.CAB?37419.4133796296
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
(Shockwave Flash Object) -
http://download.macromedia.com...cabs/flash/swflash.cab
O17 -
HKLM\System\CCS\Services\Tcpip\..\{C5F5B308-DBDA-4FCF-84C0-6052FF86AC15}:
Any help would be greatly appreciated, since no one else seems to know what my problem is. : (
Facebook
Twitter