PDA

View Full Version : Quick Launch disappearing

Matt
June 16th 04, 09:47 AM
Whenever I restart my computer or log out the quick launch
disappears, this changed from a few days ago when it would
re-order the arrangement of icons in it, and would load the
search assistant, no matter how many times I disabled it.
Now neither one of them start when I start my computer,
even if I log of and quick launch is there when I shut down.


Matt
Ramesh [MVP]
June 16th 04, 09:44 PM
Hi Matt,

The "Search Assistant" bar is a malware, and it seems to reset the =
Taskbar settings.=20

Type the command in RUN box.
Regsvr32 /u C:\Windows\System32\omniband.dll

Then, rename C:\Windows\System32\omniband.dll to old omniband.dll and =
restart Windows.

If the bar is not removed, run this program and post the log:
http://www.mvps.org/sramesh2k/Deskbands.exe

Additionally, download all the spyware cleaners and run them.
Lavasoft Ad-Aware - www.lavasoftusa.com
SpyBot S&D - http://www.safer-networking.org/
CWShredder : http://www.spywareinfo.com/~merijn/files/CWShredder.exe
Online Spyware scan: Do you have parasites?: =
http://aumha.org/a/noads.php

Reboot and check if the QuickLaunch preferences are saved. If not, apply =
this VBS:

Line 164. Restore Taskbar to Default Functionality
http://www.kellys-korner-xp.com/xp_tweaks.htm

--=20
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

"Matt" > wrote in message =
...
Whenever I restart my computer or log out the quick launch
disappears, this changed from a few days ago when it would
re-order the arrangement of icons in it, and would load the
search assistant, no matter how many times I disabled it.=20
Now neither one of them start when I start my computer,
even if I log of and quick launch is there when I shut down.


Matt
Chris Cox
June 19th 04, 04:49 AM
Hi Ramesh,

I'm suffering the exact same symptoms as Matt. Basically:

- at some point yesterday it stopped remembering how big I had my quick
launch set and the order of the icons
- later the quick launch disappeared altogether and search assistant was
present
- I ran Ad-Aware and SpyBot S&D and the search assistant was gone, but the
quick launch fails to start on boot

I've tried applying Windows XP Service Pack 1 which failed at the last stage
(hung on "Running processes after install" stage). It made no difference.
I'm planning on trying Service Pack 1a which I believe is out now.

I followed your suggestions to the letter. I even ran the tweak script from
Kelly but to no avail, whenever I start up, no quick launch.

The log from your Deskbands program is:

--------------------------------
List of installed Deskbands

{01E04581-4EEE-11d0-BFE9-00AA005B4383}
&Address
%SystemRoot%\System32\browseui.dll

{0E5CBF21-D15F-11d0-8301-00AA005B4383}
&Links
%SystemRoot%\system32\SHELL32.dll

{540D8A8B-1C3F-4E32-8132-530F6A502090}
Language bar
C:\WINDOWS\System32\msutb.dll
-------------------------------------

The other interesting thing is that everytime I reboot and run AdAware and
SpyBot, the following things get detected:

- DSO Exploit
- BlazeFind.Bridge

They remove them successfully, but sure enough on reboot they're back.
Something isn't cleaning them up properly or something is reinstalling them.

I'm getting to the end of my tether. If the service pack doesn't work, I'm
thinking I'm going to need a reformat :-(

Any help would be GREATLY appreciated!

Best regards,
Chris

"Ramesh [MVP]" > wrote in message
...
Hi Matt,

The "Search Assistant" bar is a malware, and it seems to reset the Taskbar
settings.

Type the command in RUN box.
Regsvr32 /u C:\Windows\System32\omniband.dll

Then, rename C:\Windows\System32\omniband.dll to old omniband.dll and
restart Windows.

If the bar is not removed, run this program and post the log:
http://www.mvps.org/sramesh2k/Deskbands.exe

Additionally, download all the spyware cleaners and run them.
Lavasoft Ad-Aware - www.lavasoftusa.com
SpyBot S&D - http://www.safer-networking.org/
CWShredder : http://www.spywareinfo.com/~merijn/files/CWShredder.exe
Online Spyware scan: Do you have parasites?: http://aumha.org/a/noads.php

Reboot and check if the QuickLaunch preferences are saved. If not, apply
this VBS:

Line 164. Restore Taskbar to Default Functionality
http://www.kellys-korner-xp.com/xp_tweaks.htm

--
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

"Matt" > wrote in message
...
Whenever I restart my computer or log out the quick launch
disappears, this changed from a few days ago when it would
re-order the arrangement of icons in it, and would load the
search assistant, no matter how many times I disabled it.
Now neither one of them start when I start my computer,
even if I log of and quick launch is there when I shut down.


Matt
Chris Cox
June 19th 04, 04:49 AM
"Chris Cox" > wrote in message
...
> Hi Ramesh,
>
> I'm suffering the exact same symptoms as Matt. Basically:
>
> - at some point yesterday it stopped remembering how big I had my quick
> launch set and the order of the icons
> - later the quick launch disappeared altogether and search assistant was
> present
> - I ran Ad-Aware and SpyBot S&D and the search assistant was gone, but the
> quick launch fails to start on boot

Oh, I've also run CWShredder (came up clean), and Online Spyware scan (also
clean). Also done a full virus scan with nothing revealed using Norton
AntiVirus 2003.
Chris Cox
June 19th 04, 06:45 AM
"Chris Cox" > wrote in message
...
> Hi Ramesh,
>
> I'm suffering the exact same symptoms as Matt. Basically:
>
> - at some point yesterday it stopped remembering how big I had my quick
> launch set and the order of the icons
> - later the quick launch disappeared altogether and search assistant was
> present
> - I ran Ad-Aware and SpyBot S&D and the search assistant was gone, but the
> quick launch fails to start on boot
>
> I've tried applying Windows XP Service Pack 1 which failed at the last
stage
> (hung on "Running processes after install" stage). It made no difference.
> I'm planning on trying Service Pack 1a which I believe is out now.
>
> I followed your suggestions to the letter. I even ran the tweak script
from
> Kelly but to no avail, whenever I start up, no quick launch.

OK, quick update. My Quick Launch bar is now back. I ran a bunch of
Windows Updates that appeared in my systray and that seems to have fixed it.
That's making me feel better, because I simply can't live without it :-)

However, the problem with BlazeFind.Bridge returning on every reboot
remains.

Dealing with that problem now...

Chris
Ramesh [MVP]
June 19th 04, 12:42 PM
Hi Chris,

Saw the HJT log and replied to ur email.

--=20
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

"Chris Cox" > wrote in message =
...
"Chris Cox" > wrote in message
...
> Hi Ramesh,
>
> I'm suffering the exact same symptoms as Matt. Basically:
>
> - at some point yesterday it stopped remembering how big I had my =
quick
> launch set and the order of the icons
> - later the quick launch disappeared altogether and search assistant =
was
> present
> - I ran Ad-Aware and SpyBot S&D and the search assistant was gone, but =
the
> quick launch fails to start on boot
>
> I've tried applying Windows XP Service Pack 1 which failed at the last
stage
> (hung on "Running processes after install" stage). It made no =
difference.
> I'm planning on trying Service Pack 1a which I believe is out now.
>
> I followed your suggestions to the letter. I even ran the tweak =
script
from
> Kelly but to no avail, whenever I start up, no quick launch.

OK, quick update. My Quick Launch bar is now back. I ran a bunch of
Windows Updates that appeared in my systray and that seems to have fixed =
it.
That's making me feel better, because I simply can't live without it :-)

However, the problem with BlazeFind.Bridge returning on every reboot
remains.

Dealing with that problem now...

Chris
TheRosey1
June 22nd 04, 03:49 AM
Can you give me the same info?
I still can't get my darn quicklaunch to stay put after boot either, and I too used
the fix from Kelly's Korner.
Thanks so much!
T

"Ramesh [MVP]" wrote:

> Hi Chris,
>
> Saw the HJT log and replied to ur email.
>
> --
> Ramesh - Microsoft MVP
> Windows XP Shell/User
> http://www.mvps.org/sramesh2k
>
> AumHa VSOP: http://www.aumha.org
>
> "Chris Cox" > wrote in message ...
> "Chris Cox" > wrote in message
> ...
> > Hi Ramesh,
> >
> > I'm suffering the exact same symptoms as Matt. Basically:
> >
> > - at some point yesterday it stopped remembering how big I had my quick
> > launch set and the order of the icons
> > - later the quick launch disappeared altogether and search assistant was
> > present
> > - I ran Ad-Aware and SpyBot S&D and the search assistant was gone, but the
> > quick launch fails to start on boot
> >
> > I've tried applying Windows XP Service Pack 1 which failed at the last
> stage
> > (hung on "Running processes after install" stage). It made no difference.
> > I'm planning on trying Service Pack 1a which I believe is out now.
> >
> > I followed your suggestions to the letter. I even ran the tweak script
> from
> > Kelly but to no avail, whenever I start up, no quick launch.
>
> OK, quick update. My Quick Launch bar is now back. I ran a bunch of
> Windows Updates that appeared in my systray and that seems to have fixed it.
> That's making me feel better, because I simply can't live without it :-)
>
> However, the problem with BlazeFind.Bridge returning on every reboot
> remains.
>
> Dealing with that problem now...
>
> Chris
>
>
>
Ramesh [MVP]
June 22nd 04, 03:49 AM
Chris had his problem resolved by eliminating spyware from his PC. =
Blazefind was causing the QL settings reset. You may post your =
HijackThis log to Spywareinfo.com or AumHa.org forums.

--=20
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

"TheRosey1" > wrote in message =
...
Can you give me the same info?
I still can't get my darn quicklaunch to stay put after boot either, and =
I too used=20
the fix from Kelly's Korner.
Thanks so much!
T

"Ramesh [MVP]" wrote:

> Hi Chris,
>=20
> Saw the HJT log and replied to ur email.
>=20
> --=20
> Ramesh - Microsoft MVP
> Windows XP Shell/User
> http://www.mvps.org/sramesh2k
>=20
> AumHa VSOP: http://www.aumha.org
>=20
> "Chris Cox" > wrote in message =
...
> "Chris Cox" > wrote in message
> ...
> > Hi Ramesh,
> >
> > I'm suffering the exact same symptoms as Matt. Basically:
> >
> > - at some point yesterday it stopped remembering how big I had my =
quick
> > launch set and the order of the icons
> > - later the quick launch disappeared altogether and search assistant =
was
> > present
> > - I ran Ad-Aware and SpyBot S&D and the search assistant was gone, =
but the
> > quick launch fails to start on boot
> >
> > I've tried applying Windows XP Service Pack 1 which failed at the =
last
> stage
> > (hung on "Running processes after install" stage). It made no =
difference.
> > I'm planning on trying Service Pack 1a which I believe is out now.
> >
> > I followed your suggestions to the letter. I even ran the tweak =
script
> from
> > Kelly but to no avail, whenever I start up, no quick launch.
>=20
> OK, quick update. My Quick Launch bar is now back. I ran a bunch of
> Windows Updates that appeared in my systray and that seems to have =
fixed it.
> That's making me feel better, because I simply can't live without it =
:-)
>=20
> However, the problem with BlazeFind.Bridge returning on every reboot
> remains.
>=20
> Dealing with that problem now...
>=20
> Chris
>=20
>=20
>
TheRosey1
June 22nd 04, 04:43 AM
So essentially I still have spyware on my machine that Ad-Aware, Spybot & CWshred all missed?

"Ramesh [MVP]" wrote:

> Chris had his problem resolved by eliminating spyware from his PC. Blazefind was causing the QL settings reset. You may post your HijackThis log to Spywareinfo.com or AumHa.org forums.
>
> --
> Ramesh - Microsoft MVP
> Windows XP Shell/User
> http://www.mvps.org/sramesh2k
>
> AumHa VSOP: http://www.aumha.org
>
> "TheRosey1" > wrote in message ...
> Can you give me the same info?
> I still can't get my darn quicklaunch to stay put after boot either, and I too used
> the fix from Kelly's Korner.
> Thanks so much!
> T
>
> "Ramesh [MVP]" wrote:
>
> > Hi Chris,
> >
> > Saw the HJT log and replied to ur email.
> >
> > --
> > Ramesh - Microsoft MVP
> > Windows XP Shell/User
> > http://www.mvps.org/sramesh2k
> >
> > AumHa VSOP: http://www.aumha.org
> >
> > "Chris Cox" > wrote in message ...
> > "Chris Cox" > wrote in message
> > ...
> > > Hi Ramesh,
> > >
> > > I'm suffering the exact same symptoms as Matt. Basically:
> > >
> > > - at some point yesterday it stopped remembering how big I had my quick
> > > launch set and the order of the icons
> > > - later the quick launch disappeared altogether and search assistant was
> > > present
> > > - I ran Ad-Aware and SpyBot S&D and the search assistant was gone, but the
> > > quick launch fails to start on boot
> > >
> > > I've tried applying Windows XP Service Pack 1 which failed at the last
> > stage
> > > (hung on "Running processes after install" stage). It made no difference.
> > > I'm planning on trying Service Pack 1a which I believe is out now.
> > >
> > > I followed your suggestions to the letter. I even ran the tweak script
> > from
> > > Kelly but to no avail, whenever I start up, no quick launch.
> >
> > OK, quick update. My Quick Launch bar is now back. I ran a bunch of
> > Windows Updates that appeared in my systray and that seems to have fixed it.
> > That's making me feel better, because I simply can't live without it :-)
> >
> > However, the problem with BlazeFind.Bridge returning on every reboot
> > remains.
> >
> > Dealing with that problem now...
> >
> > Chris
> >
> >
> >
>
Chris Cox
June 22nd 04, 04:43 AM
"TheRosey1" > wrote in message
...
> So essentially I still have spyware on my machine that Ad-Aware, Spybot &
CWshred all missed?

There were elements of BlazeFind that Ad-Aware didn't pick up until I
cranked up the sensitivity and depth of its searching.

Even then there were specific items in the HijackThis log that needed to be
removed manually.

Can't recall exactly where the instructions for improving Ad-Aware were, but
they were similar to this:
http://www.cjwd.demon.co.uk/spybot-adaware.html

I also posted my HijackThis log at:
http://www.wilderssecurity.com/forumdisplay.php?f=26

There's a couple of good guys there that go through your log and check it
out. Luckily for me, between Ad-Aware and Ramesh I'd already cleaned it ;-)

I still have a bit of weird behaviour on my machine though. Intermittently
it will either crash and reboot itself after logging in, or it will flash up
an error saying "Server is busy" with options to "Switch to" or "Retry".
Switch to brings up the Start Menu, Retry does nothing.

Haven't worked out what process is causing that, but there's nothing in my
HijackThis log to suggest there's anything Spyware related.

I may have to relent and reinstall my OS anyway. But hey, my QL bar is
staying put ;-)

Chris
Ramesh [MVP]
June 22nd 04, 04:43 AM
Chris,

>> error saying "Server is busy" with options to "Switch to" or "Retry".

You may try R'Mon from Sysinternals. Load R'Mon and track all the =
processes when you see this errors and note down the process names =
causing this at that time (turn on "Clock Time" option, that would be =
useful). If running XP Pro, type :

"Tasklist /M C:\ListTasks.txt" (from Command Prompt) and have a look at =
the ListTasks.txt file to know what's going on.

For XP Home, get a copy of Tasklist from here:
http://www.mvps.org/sramesh2k/utils/tasklist.exe

Then, start MSCONFIG and switch to Services tab. Check "Hide all =
Microsoft services", have a look at what are the additional ones left =
out, and do a drill-down on each service. Additionally, get Autoruns =
from www.sysinternals.com It catches many startup entries which MSCONFIG =
or HijackThis will not. Generate a Log file using Autoruns.

--=20
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

"Chris Cox" > wrote in message =
...
"TheRosey1" > wrote in message
...
> So essentially I still have spyware on my machine that Ad-Aware, =
Spybot &
CWshred all missed?

There were elements of BlazeFind that Ad-Aware didn't pick up until I
cranked up the sensitivity and depth of its searching.

Even then there were specific items in the HijackThis log that needed to =
be
removed manually.

Can't recall exactly where the instructions for improving Ad-Aware were, =
but
they were similar to this:
http://www.cjwd.demon.co.uk/spybot-adaware.html

I also posted my HijackThis log at:
http://www.wilderssecurity.com/forumdisplay.php?f=3D26

There's a couple of good guys there that go through your log and check =
it
out. Luckily for me, between Ad-Aware and Ramesh I'd already cleaned it =
;-)

I still have a bit of weird behaviour on my machine though. =
Intermittently
it will either crash and reboot itself after logging in, or it will =
flash up
an error saying "Server is busy" with options to "Switch to" or "Retry".
Switch to brings up the Start Menu, Retry does nothing.

Haven't worked out what process is causing that, but there's nothing in =
my
HijackThis log to suggest there's anything Spyware related.

I may have to relent and reinstall my OS anyway. But hey, my QL bar is
staying put ;-)

Chris
Chris Cox
June 23rd 04, 12:43 AM
Ramesh,

I tried this. The Regmon tool I set to run on next boot and my machine
wouldn't start. Needed to use "last known good configuration" to get going.

Nothing else seemed to bring up anything that sparked alarm bells with me.

Chris

"Ramesh [MVP]" > wrote in message
...
Chris,

>> error saying "Server is busy" with options to "Switch to" or "Retry".

You may try R'Mon from Sysinternals. Load R'Mon and track all the processes
when you see this errors and note down the process names causing this at
that time (turn on "Clock Time" option, that would be useful). If running XP
Pro, type :

"Tasklist /M C:\ListTasks.txt" (from Command Prompt) and have a look at the
ListTasks.txt file to know what's going on.

For XP Home, get a copy of Tasklist from here:
http://www.mvps.org/sramesh2k/utils/tasklist.exe

Then, start MSCONFIG and switch to Services tab. Check "Hide all Microsoft
services", have a look at what are the additional ones left out, and do a
drill-down on each service. Additionally, get Autoruns from
www.sysinternals.com It catches many startup entries which MSCONFIG or
HijackThis will not. Generate a Log file using Autoruns.

--
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

"Chris Cox" > wrote in message
...
"TheRosey1" > wrote in message
...
> So essentially I still have spyware on my machine that Ad-Aware, Spybot &
CWshred all missed?

There were elements of BlazeFind that Ad-Aware didn't pick up until I
cranked up the sensitivity and depth of its searching.

Even then there were specific items in the HijackThis log that needed to be
removed manually.

Can't recall exactly where the instructions for improving Ad-Aware were, but
they were similar to this:
http://www.cjwd.demon.co.uk/spybot-adaware.html

I also posted my HijackThis log at:
http://www.wilderssecurity.com/forumdisplay.php?f=26

There's a couple of good guys there that go through your log and check it
out. Luckily for me, between Ad-Aware and Ramesh I'd already cleaned it ;-)

I still have a bit of weird behaviour on my machine though. Intermittently
it will either crash and reboot itself after logging in, or it will flash up
an error saying "Server is busy" with options to "Switch to" or "Retry".
Switch to brings up the Start Menu, Retry does nothing.

Haven't worked out what process is causing that, but there's nothing in my
HijackThis log to suggest there's anything Spyware related.

I may have to relent and reinstall my OS anyway. But hey, my QL bar is
staying put ;-)

Chris
David Candy
June 23rd 04, 01:43 AM
Does this happen if your firewall is disabled. Just a wild guess.

--=20
----------------------------------------------------------
http://www.counterpunch.org/bageant06132004.html
"Chris Cox" > wrote in message =
...
> Ramesh,
>=20
> I tried this. The Regmon tool I set to run on next boot and my =
machine
> wouldn't start. Needed to use "last known good configuration" to get =
going.
>=20
> Nothing else seemed to bring up anything that sparked alarm bells with =
me.
>=20
> Chris
>=20
> "Ramesh [MVP]" > wrote in message
> ...
> Chris,
>=20
> >> error saying "Server is busy" with options to "Switch to" or =
"Retry".
>=20
> You may try R'Mon from Sysinternals. Load R'Mon and track all the =
processes
> when you see this errors and note down the process names causing this =
at
> that time (turn on "Clock Time" option, that would be useful). If =
running XP
> Pro, type :
>=20
> "Tasklist /M C:\ListTasks.txt" (from Command Prompt) and have a look =
at the
> ListTasks.txt file to know what's going on.
>=20
> For XP Home, get a copy of Tasklist from here:
> http://www.mvps.org/sramesh2k/utils/tasklist.exe
>=20
> Then, start MSCONFIG and switch to Services tab. Check "Hide all =
Microsoft
> services", have a look at what are the additional ones left out, and =
do a
> drill-down on each service. Additionally, get Autoruns from
> www.sysinternals.com It catches many startup entries which MSCONFIG or
> HijackThis will not. Generate a Log file using Autoruns.
>=20
> --=20
> Ramesh - Microsoft MVP
> Windows XP Shell/User
> http://www.mvps.org/sramesh2k
>=20
> AumHa VSOP: http://www.aumha.org
>=20
> "Chris Cox" > wrote in message
> ...
> "TheRosey1" > wrote in message
> ...
> > So essentially I still have spyware on my machine that Ad-Aware, =
Spybot &
> CWshred all missed?
>=20
> There were elements of BlazeFind that Ad-Aware didn't pick up until I
> cranked up the sensitivity and depth of its searching.
>=20
> Even then there were specific items in the HijackThis log that needed =
to be
> removed manually.
>=20
> Can't recall exactly where the instructions for improving Ad-Aware =
were, but
> they were similar to this:
> http://www.cjwd.demon.co.uk/spybot-adaware.html
>=20
> I also posted my HijackThis log at:
> http://www.wilderssecurity.com/forumdisplay.php?f=3D26
>=20
> There's a couple of good guys there that go through your log and check =
it
> out. Luckily for me, between Ad-Aware and Ramesh I'd already cleaned =
it ;-)
>=20
> I still have a bit of weird behaviour on my machine though. =
Intermittently
> it will either crash and reboot itself after logging in, or it will =
flash up
> an error saying "Server is busy" with options to "Switch to" or =
"Retry".
> Switch to brings up the Start Menu, Retry does nothing.
>=20
> Haven't worked out what process is causing that, but there's nothing =
in my
> HijackThis log to suggest there's anything Spyware related.
>=20
> I may have to relent and reinstall my OS anyway. But hey, my QL bar is
> staying put ;-)
>=20
> Chris
>=20
>=20
>
Chris Cox
June 23rd 04, 03:43 AM
Don't have a personal firewall on my machine. Have an external
firewall/router at home, and another at work.

"David Candy" > wrote in message
...
Does this happen if your firewall is disabled. Just a wild guess.

--
----------------------------------------------------------
http://www.counterpunch.org/bageant06132004.html
"Chris Cox" > wrote in message
...
> Ramesh,
>
> I tried this. The Regmon tool I set to run on next boot and my machine
> wouldn't start. Needed to use "last known good configuration" to get
going.
>
> Nothing else seemed to bring up anything that sparked alarm bells with me.
>
> Chris
>
> "Ramesh [MVP]" > wrote in message
> ...
> Chris,
>
> >> error saying "Server is busy" with options to "Switch to" or "Retry".
>
> You may try R'Mon from Sysinternals. Load R'Mon and track all the
processes
> when you see this errors and note down the process names causing this at
> that time (turn on "Clock Time" option, that would be useful). If running
XP
> Pro, type :
>
> "Tasklist /M C:\ListTasks.txt" (from Command Prompt) and have a look at
the
> ListTasks.txt file to know what's going on.
>
> For XP Home, get a copy of Tasklist from here:
> http://www.mvps.org/sramesh2k/utils/tasklist.exe
>
> Then, start MSCONFIG and switch to Services tab. Check "Hide all Microsoft
> services", have a look at what are the additional ones left out, and do a
> drill-down on each service. Additionally, get Autoruns from
> www.sysinternals.com It catches many startup entries which MSCONFIG or
> HijackThis will not. Generate a Log file using Autoruns.
>
> --
> Ramesh - Microsoft MVP
> Windows XP Shell/User
> http://www.mvps.org/sramesh2k
>
> AumHa VSOP: http://www.aumha.org
>
> "Chris Cox" > wrote in message
> ...
> "TheRosey1" > wrote in message
> ...
> > So essentially I still have spyware on my machine that Ad-Aware, Spybot
&
> CWshred all missed?
>
> There were elements of BlazeFind that Ad-Aware didn't pick up until I
> cranked up the sensitivity and depth of its searching.
>
> Even then there were specific items in the HijackThis log that needed to
be
> removed manually.
>
> Can't recall exactly where the instructions for improving Ad-Aware were,
but
> they were similar to this:
> http://www.cjwd.demon.co.uk/spybot-adaware.html
>
> I also posted my HijackThis log at:
> http://www.wilderssecurity.com/forumdisplay.php?f=26
>
> There's a couple of good guys there that go through your log and check it
> out. Luckily for me, between Ad-Aware and Ramesh I'd already cleaned it
;-)
>
> I still have a bit of weird behaviour on my machine though.
Intermittently
> it will either crash and reboot itself after logging in, or it will flash
up
> an error saying "Server is busy" with options to "Switch to" or "Retry".
> Switch to brings up the Start Menu, Retry does nothing.
>
> Haven't worked out what process is causing that, but there's nothing in my
> HijackThis log to suggest there's anything Spyware related.
>
> I may have to relent and reinstall my OS anyway. But hey, my QL bar is
> staying put ;-)
>
> Chris
>
>
>
Ramesh [MVP]
June 23rd 04, 05:42 AM
Chris, You don't need to set the option to run on next boot. Create a =
shortcut for it and launch once you're logged on. BTW, have you tried =
Tasklist /M >c:\ListTasks.txt ?

--=20
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

"Chris Cox" > wrote in message =
...
Ramesh,

I tried this. The Regmon tool I set to run on next boot and my machine
wouldn't start. Needed to use "last known good configuration" to get =
going.

Nothing else seemed to bring up anything that sparked alarm bells with =
me.

Chris

"Ramesh [MVP]" > wrote in message
...
Chris,

>> error saying "Server is busy" with options to "Switch to" or "Retry".

You may try R'Mon from Sysinternals. Load R'Mon and track all the =
processes
when you see this errors and note down the process names causing this at
that time (turn on "Clock Time" option, that would be useful). If =
running XP
Pro, type :

"Tasklist /M C:\ListTasks.txt" (from Command Prompt) and have a look at =
the
ListTasks.txt file to know what's going on.

For XP Home, get a copy of Tasklist from here:
http://www.mvps.org/sramesh2k/utils/tasklist.exe

Then, start MSCONFIG and switch to Services tab. Check "Hide all =
Microsoft
services", have a look at what are the additional ones left out, and do =
a
drill-down on each service. Additionally, get Autoruns from
www.sysinternals.com It catches many startup entries which MSCONFIG or
HijackThis will not. Generate a Log file using Autoruns.

--=20
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

"Chris Cox" > wrote in message
...
"TheRosey1" > wrote in message
...
> So essentially I still have spyware on my machine that Ad-Aware, =
Spybot &
CWshred all missed?

There were elements of BlazeFind that Ad-Aware didn't pick up until I
cranked up the sensitivity and depth of its searching.

Even then there were specific items in the HijackThis log that needed to =
be
removed manually.

Can't recall exactly where the instructions for improving Ad-Aware were, =
but
they were similar to this:
http://www.cjwd.demon.co.uk/spybot-adaware.html

I also posted my HijackThis log at:
http://www.wilderssecurity.com/forumdisplay.php?f=3D26

There's a couple of good guys there that go through your log and check =
it
out. Luckily for me, between Ad-Aware and Ramesh I'd already cleaned it =
;-)

I still have a bit of weird behaviour on my machine though. =
Intermittently
it will either crash and reboot itself after logging in, or it will =
flash up
an error saying "Server is busy" with options to "Switch to" or "Retry".
Switch to brings up the Start Menu, Retry does nothing.

Haven't worked out what process is causing that, but there's nothing in =
my
HijackThis log to suggest there's anything Spyware related.

I may have to relent and reinstall my OS anyway. But hey, my QL bar is
staying put ;-)

Chris
Chris Cox
June 23rd 04, 06:42 AM
OK, I'll try that next time.

I've run TaskList and have the file. Should I post it in message, email it
to you or post it on a forum somewhere?

Cheers,
Chris

"Ramesh [MVP]" > wrote in message
...
Chris, You don't need to set the option to run on next boot. Create a
shortcut for it and launch once you're logged on. BTW, have you tried
Tasklist /M >c:\ListTasks.txt ?

--
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

"Chris Cox" > wrote in message
...
Ramesh,

I tried this. The Regmon tool I set to run on next boot and my machine
wouldn't start. Needed to use "last known good configuration" to get going.

Nothing else seemed to bring up anything that sparked alarm bells with me.

Chris

"Ramesh [MVP]" > wrote in message
...
Chris,

>> error saying "Server is busy" with options to "Switch to" or "Retry".

You may try R'Mon from Sysinternals. Load R'Mon and track all the processes
when you see this errors and note down the process names causing this at
that time (turn on "Clock Time" option, that would be useful). If running XP
Pro, type :

"Tasklist /M C:\ListTasks.txt" (from Command Prompt) and have a look at the
ListTasks.txt file to know what's going on.

For XP Home, get a copy of Tasklist from here:
http://www.mvps.org/sramesh2k/utils/tasklist.exe

Then, start MSCONFIG and switch to Services tab. Check "Hide all Microsoft
services", have a look at what are the additional ones left out, and do a
drill-down on each service. Additionally, get Autoruns from
www.sysinternals.com It catches many startup entries which MSCONFIG or
HijackThis will not. Generate a Log file using Autoruns.

--
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

"Chris Cox" > wrote in message
...
"TheRosey1" > wrote in message
...
> So essentially I still have spyware on my machine that Ad-Aware, Spybot &
CWshred all missed?

There were elements of BlazeFind that Ad-Aware didn't pick up until I
cranked up the sensitivity and depth of its searching.

Even then there were specific items in the HijackThis log that needed to be
removed manually.

Can't recall exactly where the instructions for improving Ad-Aware were, but
they were similar to this:
http://www.cjwd.demon.co.uk/spybot-adaware.html

I also posted my HijackThis log at:
http://www.wilderssecurity.com/forumdisplay.php?f=26

There's a couple of good guys there that go through your log and check it
out. Luckily for me, between Ad-Aware and Ramesh I'd already cleaned it ;-)

I still have a bit of weird behaviour on my machine though. Intermittently
it will either crash and reboot itself after logging in, or it will flash up
an error saying "Server is busy" with options to "Switch to" or "Retry".
Switch to brings up the Start Menu, Retry does nothing.

Haven't worked out what process is causing that, but there's nothing in my
HijackThis log to suggest there's anything Spyware related.

I may have to relent and reinstall my OS anyway. But hey, my QL bar is
staying put ;-)

Chris
Ramesh [MVP]
June 23rd 04, 06:42 AM
You may post it here.

--=20
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

"Chris Cox" > wrote in message =
...
OK, I'll try that next time.

I've run TaskList and have the file. Should I post it in message, email =
it
to you or post it on a forum somewhere?

Cheers,
Chris

"Ramesh [MVP]" > wrote in message
...
Chris, You don't need to set the option to run on next boot. Create a
shortcut for it and launch once you're logged on. BTW, have you tried
Tasklist /M >c:\ListTasks.txt ?

--=20
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

"Chris Cox" > wrote in message
...
Ramesh,

I tried this. The Regmon tool I set to run on next boot and my machine
wouldn't start. Needed to use "last known good configuration" to get =
going.

Nothing else seemed to bring up anything that sparked alarm bells with =
me.

Chris

"Ramesh [MVP]" > wrote in message
...
Chris,

>> error saying "Server is busy" with options to "Switch to" or "Retry".

You may try R'Mon from Sysinternals. Load R'Mon and track all the =
processes
when you see this errors and note down the process names causing this at
that time (turn on "Clock Time" option, that would be useful). If =
running XP
Pro, type :

"Tasklist /M C:\ListTasks.txt" (from Command Prompt) and have a look at =
the
ListTasks.txt file to know what's going on.

For XP Home, get a copy of Tasklist from here:
http://www.mvps.org/sramesh2k/utils/tasklist.exe

Then, start MSCONFIG and switch to Services tab. Check "Hide all =
Microsoft
services", have a look at what are the additional ones left out, and do =
a
drill-down on each service. Additionally, get Autoruns from
www.sysinternals.com It catches many startup entries which MSCONFIG or
HijackThis will not. Generate a Log file using Autoruns.

--=20
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

"Chris Cox" > wrote in message
...
"TheRosey1" > wrote in message
...
> So essentially I still have spyware on my machine that Ad-Aware, =
Spybot &
CWshred all missed?

There were elements of BlazeFind that Ad-Aware didn't pick up until I
cranked up the sensitivity and depth of its searching.

Even then there were specific items in the HijackThis log that needed to =
be
removed manually.

Can't recall exactly where the instructions for improving Ad-Aware were, =
but
they were similar to this:
http://www.cjwd.demon.co.uk/spybot-adaware.html

I also posted my HijackThis log at:
http://www.wilderssecurity.com/forumdisplay.php?f=3D26

There's a couple of good guys there that go through your log and check =
it
out. Luckily for me, between Ad-Aware and Ramesh I'd already cleaned it =
;-)

I still have a bit of weird behaviour on my machine though. =
Intermittently
it will either crash and reboot itself after logging in, or it will =
flash up
an error saying "Server is busy" with options to "Switch to" or "Retry".
Switch to brings up the Start Menu, Retry does nothing.

Haven't worked out what process is causing that, but there's nothing in =
my
HijackThis log to suggest there's anything Spyware related.

I may have to relent and reinstall my OS anyway. But hey, my QL bar is
staying put ;-)

Chris
Chris Cox
June 23rd 04, 06:42 AM
TaskList log as requested. Note that I was running some applications at the
time (IE, HomeSite, Putty etc):


Image Name PID Modules
========================= ======
=============================================
System Idle Process 0 N/A
System 4 N/A
smss.exe 584 ntdll.dll
csrss.exe 640 ntdll.dll, CSRSRV.dll, basesrv.dll,
winsrv.dll, USER32.dll, KERNEL32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
LPK.DLL, USP10.dll, sxs.dll
winlogon.exe 664 ntdll.dll, kernel32.dll, msvcrt.dll,
ADVAPI32.dll, RPCRT4.dll, GDI32.dll,
USER32.dll, USERENV.dll, NDdeApi.dll,
CRYPT32.dll, MSASN1.dll, Secur32.dll,
WINSTA.dll, PROFMAP.dll, NETAPI32.dll,
REGAPI.dll, WS2_32.dll, WS2HELP.dll,
AUTHZ.dll, PSAPI.DLL, VERSION.dll,
SETUPAPI.dll, IMM32.DLL, LPK.DLL,
USP10.dll,
MSGINA.dll, SHELL32.dll, SHLWAPI.dll,
COMCTL32.dll, ODBC32.dll, comdlg32.dll,
comctl32.dll, odbcint.dll, SHSVCS.dll,
sfc.dll, sfc_os.dll, WINTRUST.dll,
ole32.dll, IMAGEHLP.dll, msctfime.ime,
WINSCARD.DLL, WTSAPI32.dll, cscdll.dll,
rsaenh.dll, WlNotify.dll, WINMM.dll,
WINSPOOL.DRV, MPR.dll, SYNCOR11.DLL,
UxTheme.dll, sxs.dll, msv1_0.dll,
wldap32.dll, SAMLIB.dll, cscui.dll,
drprov.dll, ntlanman.dll, NETUI0.dll,
NETUI1.dll, NETRAP.dll, davclnt.dll,
wdmaud.drv, msacm32.drv, MSACM32.dll,
COMRes.dll, OLEAUT32.dll, CLBCATQ.DLL,
midimap.dll, NTMARTA.DLL, wbemprox.dll,
wbemcomn.dll, wbemsvc.dll, fastprox.dll,
Apphelp.dll
services.exe 708 ntdll.dll, kernel32.dll, msvcrt.dll,
ADVAPI32.dll, RPCRT4.dll, USER32.dll,
GDI32.dll, USERENV.dll, SCESRV.dll,
AUTHZ.dll, umpnpmgr.dll, WINSTA.dll,
NCObjAPI.DLL, IMM32.DLL, LPK.DLL,
USP10.dll,
secur32.dll, eventlog.dll, WS2_32.dll,
WS2HELP.dll, PSAPI.DLL, wtsapi32.dll,
netapi32.dll, Apphelp.dll
lsass.exe 720 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, LSASRV.dll, msvcrt.dll,
Secur32.dll, USER32.dll, GDI32.dll,
SAMSRV.dll, cryptdll.dll, DNSAPI.dll,
WS2_32.dll, WS2HELP.dll, MSASN1.dll,
NETAPI32.dll, SAMLIB.dll, MPR.dll,
NTDSAPI.dll, WLDAP32.dll, IMM32.DLL,
LPK.DLL, USP10.dll, msprivs.dll,
kerberos.dll, msv1_0.dll, netlogon.dll,
w32time.dll, MSVCP60.dll, iphlpapi.dll,
USERENV.dll, schannel.dll, CRYPT32.dll,
wdigest.dll, rsaenh.dll, scecli.dll,
SETUPAPI.dll, OLEAUT32.dll, OLE32.DLL,
shell32.dll, SHLWAPI.dll, comctl32.dll,
comctl32.dll, mswsock.dll, wshtcpip.dll,
ipsecsvc.dll, oakley.DLL, WINIPSEC.DLL,
pstorsvc.dll, psbase.dll, dssenh.dll
svchost.exe 896 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, rpcss.dll, msvcrt.dll,
WS2_32.dll, WS2HELP.dll, USER32.dll,
GDI32.dll, Secur32.dll, IMM32.DLL, LPK.DLL,
USP10.dll, userenv.dll, rsaenh.dll,
mswsock.dll, wshtcpip.dll, DNSAPI.dll,
iphlpapi.dll, winrnr.dll, WLDAP32.dll,
rasadhlp.dll, CLBCATQ.DLL, ole32.dll,
OLEAUT32.dll, COMRes.dll, VERSION.dll,
Apphelp.dll, msi.dll
svchost.exe 1056 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, ole32.dll, GDI32.dll,
USER32.dll, IMM32.DLL, LPK.DLL, USP10.dll,
dhcpcsvc.dll, msvcrt.dll, DNSAPI.dll,
WS2_32.dll, WS2HELP.dll, iphlpapi.dll,
Secur32.dll, mswsock.dll, wshtcpip.dll,
termsrv.dll, ICAAPI.dll, OLEAUT32.dll,
AUTHZ.dll, mstlsapi.dll, ACTIVEDS.dll,
adsldpc.dll, NETAPI32.dll, WLDAP32.dll,
ATL.DLL, CRYPT32.dll, MSASN1.dll,
wzcsvc.dll, rtutils.dll, WMI.dll,
WTSAPI32.dll, WINSTA.dll, SHLWAPI.dll,
ESENT.dll, irmon.dll, SHELL32.dll,
USERENV.dll, comctl32.dll, comctl32.dll,
REGAPI.dll, rsaenh.dll, winmm.dll,
SYNCOR11.DLL, VERSION.dll, wshirda.dll,
rastls.dll, CRYPTUI.dll, WINTRUST.dll,
IMAGEHLP.dll, WININET.dll, MPRAPI.dll,
SAMLIB.dll, SETUPAPI.dll, RASAPI32.dll,
rasman.dll, TAPI32.dll, SCHANNEL.dll,
WinSCard.dll, NTMARTA.DLL, raschap.dll,
shsvcs.dll, CLBCATQ.DLL, COMRes.dll,
msv1_0.dll, schedsvc.dll, NTDSAPI.dll,
MSIDLE.DLL, audiosrv.dll, wkssvc.dll,
cryptsvc.dll, certcli.dll, es.dll,
ersvc.dll, pchsvc.dll, srvsvc.dll,
msgsvc.dll, netman.dll, seclogon.dll,
sens.dll, tapisrv.dll, PSAPI.DLL,
srsvc.dll,
POWRPROF.dll, trkwks.dll, winspool.drv,
w32time.dll, MSVCP60.dll, rasmans.dll,
WINIPSEC.DLL, netcfgx.dll, CLUSAPI.dll,
browser.dll, wuauserv.dll, mspmspsv.dll,

wmisvc.dll, wbemcomn.dll, VSSAPI.DLL,
wuaueng.dll, ADVPACK.dll, sfc.dll,
sfc_os.dll, rastapi.dll, unimdm.tsp,
uniplat.dll, SXS.DLL, unimdmat.dll,
modemui.dll, comsvcs.dll, MTXCLU.DLL,
WSOCK32.dll, colbact.DLL, RESUTILS.DLL,
kmddsp.tsp, mtxoci.dll, ndptsp.tsp,
ipconf.tsp, h323.tsp, hidphone.tsp,
HID.DLL,
rasppp.dll, ntlsapi.dll, ipnathlp.dll,
netshell.dll, credui.dll, HNetCfg.dll,
rasadhlp.dll, wbemcore.dll, esscli.dll,
FastProx.dll, wmiutils.dll, repdrvfs.dll,
wmiprvsd.dll, NCObjAPI.DLL, wbemess.dll,
msctfime.ime, winhttp.dll, upnp.dll,
SSDPAPI.dll, msi.dll, RASDLG.dll,
ncprov.dll, qmgr.dll, SHFOLDER.dll,
qmgrprxy.dll, sensapi.dll, winrnr.dll,
Msxml3.dll, licdll.dll, dssenh.dll,
cryptnet.dll, mlang.dll, wbemsvc.dll,
catsrvut.dll, MfcSubs.dll, MPR.dll,
Cabinet.dll, urlmon.dll, catsrv.dll
svchost.exe 1212 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, dnsrslvr.dll, msvcrt.dll,
USER32.dll, GDI32.dll, DNSAPI.dll,
WS2_32.dll, WS2HELP.dll, iphlpapi.dll,
IMM32.DLL, LPK.DLL, USP10.dll, mswsock.dll,
wshtcpip.dll
svchost.exe 1244 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, ole32.dll, GDI32.dll,
USER32.dll, IMM32.DLL, LPK.DLL, USP10.dll,
lmhsvc.dll, msvcrt.dll, iphlpapi.dll,
WS2_32.dll, WS2HELP.dll, webclnt.dll,
WININET.dll, CRYPT32.dll, MSASN1.dll,
OLEAUT32.dll, SHLWAPI.dll, comctl32.dll,
shell32.dll, comctl32.dll, Secur32.dll,
wsock32.dll, mswsock.dll, DNSAPI.dll,
rasadhlp.dll, regsvc.dll, RASAPI32.DLL,
rasman.dll, NETAPI32.dll, TAPI32.dll,
rtutils.dll, WINMM.dll, SYNCOR11.DLL,
sensapi.dll, winrnr.dll, WLDAP32.dll,
wshtcpip.dll, ssdpsrv.dll
spoolsv.exe 1464 ntdll.dll, kernel32.dll, msvcrt.dll,
ADVAPI32.dll, RPCRT4.dll, GDI32.dll,
USER32.dll, IMM32.DLL, LPK.DLL, USP10.dll,
SPOOLSS.DLL, WS2_32.dll, WS2HELP.dll,
DNSAPI.dll, rasadhlp.dll, localspl.dll,
ole32.dll, OLEAUT32.dll, VERSION.dll,
Secur32.dll, sfc_os.dll, WINTRUST.dll,
CRYPT32.dll, MSASN1.dll, IMAGEHLP.dll,
USERENV.dll, winspool.drv, netapi32.dll,
cnbjmon.dll, mswsock.dll, mdimon.dll,
msi.dll, pjlmon.dll, tcpmon.dll,
usbmon.dll,
mdippr.dll, winrnr.dll, WLDAP32.dll,
win32spl.dll, NETRAP.dll, CLBCATQ.DLL,
COMRes.dll, inetpp.dll, icmp.dll,
iphlpapi.DLL
alg.exe 1604 ntdll.dll, kernel32.dll, msvcrt.dll,
ATL.DLL, ADVAPI32.dll, RPCRT4.dll,
ole32.dll, GDI32.dll, USER32.dll,
OLEAUT32.dll, WSOCK32.dll, WS2_32.dll,
WS2HELP.dll, MSWSOCK.dll, IMM32.DLL,
LPK.DLL, USP10.dll, CLBCATQ.DLL,
COMRes.dll,
VERSION.dll, hnetcfg.dll, RASAPI32.dll,
rasman.dll, NETAPI32.dll, TAPI32.dll,
SHLWAPI.dll, rtutils.dll, WINMM.dll,
netshell.dll, credui.dll, SHELL32.dll,
iphlpapi.dll, DHCPCSVC.DLL, DNSAPI.dll,
Secur32.dll, WININET.dll, CRYPT32.dll,
MSASN1.dll, SYNCOR11.DLL, comctl32.dll,
comctl32.dll, wshtcpip.dll
ati2evxx.exe 1616 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
msctfime.ime,
msvcrt.dll, ole32.dll
ccEvtMgr.exe 1728 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
ole32.dll, OLEAUT32.dll, MSVCRT.DLL,
MSVCP60.dll, ccTrust.dll, VERSION.dll,
SYMSTORE.dll, SHLWAPI.dll, MSVCIRT.dll,
IMM32.DLL, LPK.DLL, USP10.dll, Secur32.dll,
CRYPT32.dll, MSASN1.dll, rsaenh.dll,
userenv.dll, netapi32.dll, cryptnet.dll,
WLDAP32.dll, wininet.dll, comctl32.dll,
shell32.dll, comctl32.dll, wsock32.dll,
WS2_32.dll, WS2HELP.dll, NAVEvent.dll,
ccEvt.dll, CLBCATQ.DLL, COMRes.dll,
msi.dll,
SXS.DLL
Navapsvc.exe 1912 ntdll.dll, kernel32.dll, MSVCP60.dll,
MSVCRT.dll, USER32.dll, GDI32.dll,
ADVAPI32.dll, RPCRT4.dll, ole32.dll,
OLEAUT32.dll, SavRT32.dll, IMM32.DLL,
LPK.DLL, USP10.dll, CLBCATQ.DLL,
COMRes.dll,
VERSION.dll, msi.dll, SXS.DLL
svchost.exe 348 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, wiaservc.dll, msvcrt.dll,
USER32.dll, GDI32.dll, OLEAUT32.dll,
OLE32.DLL, SHLWAPI.dll, CFGMGR32.dll,
setupapi.dll, USERENV.dll, mscms.dll,
WINSPOOL.DRV, WINSTA.dll, VERSION.dll,
IMM32.DLL, LPK.DLL, USP10.dll, CLBCATQ.DLL,
COMRes.dll, ACTXPRXY.DLL, sti.dll
explorer.exe 1864 ntdll.dll, kernel32.dll, msvcrt.dll,
ADVAPI32.dll, RPCRT4.dll, GDI32.dll,
USER32.dll, SHLWAPI.dll, SHELL32.dll,
ole32.dll, OLEAUT32.dll, BROWSEUI.dll,
SHDOCVW.dll, UxTheme.dll, IMM32.DLL,
LPK.DLL, USP10.dll, comctl32.dll,
comctl32.dll, msctfime.ime, appHelp.dll,
CLBCATQ.DLL, COMRes.dll, VERSION.dll,
cscui.dll, CSCDLL.dll, themeui.dll,
Secur32.dll, MSIMG32.dll, Msimtf.dll,
MSCTF.dll, USERENV.dll, ACTXPRXY.DLL,
WININET.dll, CRYPT32.dll, MSASN1.dll,
LINKINFO.dll, ntshrui.dll, ATL.DLL,
NETAPI32.dll, urlmon.dll, MPR.dll,
drprov.dll, ntlanman.dll, NETUI0.dll,
NETUI1.dll, NETRAP.dll, SAMLIB.dll,
davclnt.dll, shdoclc.dll, msi.dll, SXS.DLL,
WINTRUST.dll, IMAGEHLP.dll, rsaenh.dll,
tbhook.dll, WINSTA.dll, SynTPFcs.dll,
webcheck.dll, stobject.dll, BatMeter.dll,
POWRPROF.dll, SETUPAPI.dll, WTSAPI32.dll,
WINMM.dll, SYNCOR11.DLL, wdmaud.drv,
msacm32.drv, MSACM32.dll, midimap.dll,
NETSHELL.dll, credui.dll, WS2_32.dll,
WS2HELP.dll, iphlpapi.dll, printui.dll,
WINSPOOL.DRV, ACTIVEDS.dll, adsldpc.dll,
WLDAP32.dll, CFGMGR32.dll, comdlg32.dll,

browselc.dll, AcroIEHelper.dll,
SDHelper.dll, olepro32.dll, NavShExt.dll,
ccTrust.dll, MSVCP60.dll, DUSER.dll,
msohev.dll, cryptnet.dll, wsock32.dll,
WZSHLSTB.DLL, mydocs.dll, eccopyhook.dll,
PICTUR~3.DLL, Wswitch.dll, oledlg.dll,
FileData.dll, zipfldr.dll,
CfShellFtpRds.dll, cfssvradmin.dll,
CFFileProxy.dll
atiptaxx.exe 236 ntdll.dll, kernel32.dll, RPCRT4.dll,
ADVAPI32.dll, USER32.dll, GDI32.dll,
SHELL32.dll, msvcrt.dll, SHLWAPI.dll,
VERSION.dll, ole32.dll, IMM32.DLL, LPK.DLL,
USP10.dll, comctl32.dll, comctl32.dll,
ATRPUIXX.ENU, CLBCATQ.DLL, OLEAUT32.dll,
COMRes.dll, atipdsxx.dll, msctfime.ime,
tbhook.dll
ltmsg.exe 1656 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
msctfime.ime,
msvcrt.dll, ole32.dll, tbhook.dll
SynTPLpr.exe 520 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
VERSION.dll, IMM32.DLL, LPK.DLL, USP10.dll,
SynTPFcs.dll, msctfime.ime, msvcrt.dll,
ole32.dll, tbhook.dll
SynTPEnh.exe 316 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
comdlg32.dll, SHLWAPI.dll, msvcrt.dll,
COMCTL32.dll, SHELL32.dll, ole32.dll,
VERSION.dll, IMM32.DLL, LPK.DLL, USP10.dll,
comctl32.dll, msctfime.ime, SynTPAPI.dll,
SynTPFcs.dll, tbhook.dll
eabservr.exe 1000 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
SHELL32.dll, msvcrt.dll, SHLWAPI.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
comctl32.dll,
comctl32.dll, EABCOMN.DLL, ole32.dll,
SETUPAPI.dll, newdev.dll, WININET.dll,
CRYPT32.dll, MSASN1.dll, OLEAUT32.dll,
credui.dll, CPQINFO.DLL, SynTPFcs.dll,
VERSION.dll, msctfime.ime, tbhook.dll
ccApp.exe 1036 ntdll.dll, kernel32.dll, SYMSTORE.dll,
ADVAPI32.dll, RPCRT4.dll, MSVCRT.dll,
COMCTL32.dll, GDI32.dll, USER32.dll,
ole32.dll, MSVCP60.dll, IMM32.DLL, LPK.DLL,
USP10.dll, SynTPFcs.dll, VERSION.dll,
msctfime.ime, wintrust.dll, CRYPT32.dll,
MSASN1.dll, IMAGEHLP.dll, rsaenh.dll,
userenv.dll, secur32.dll, netapi32.dll,
cryptnet.dll, WLDAP32.dll, wininet.dll,
OLEAUT32.dll, SHLWAPI.dll, comctl32.dll,
shell32.dll, wsock32.dll, WS2_32.dll,
WS2HELP.dll, CCEMLPXY.DLL, SYMREDIR.dll,
MSWSOCK.dll, ccErrDsp.DLL, CCREGMON.DLL,
ccEvt.DLL, ccTrust.dll, DNSAPI.dll,
CCIMSCAN.DLL, ATL.DLL, CLBCATQ.DLL,
COMRes.dll, DEFALERT.DLL, winrnr.dll,
NAVAPW32.DLL, ccPasswd.DLL, apwutil.dll,
SavRT32.dll, tbhook.dll, apwcmdnt.dll,
rasadhlp.dll, msi.dll, SXS.DLL, Msimtf.dll,
MSCTF.dll, NavEmail.dll, wshtcpip.dll,
mstask.dll, MPR.dll, comdlg32.dll,
msgsc.dll, ACTXPRXY.DLL, WINMM.dll,
SYNCOR11.DLL, SETUPAPI.dll, UxTheme.dll
iexplore.exe 1084 ntdll.dll, kernel32.dll, msvcrt.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, SHLWAPI.dll, SHDOCVW.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
comctl32.dll,
SHELL32.dll, comctl32.dll, ole32.dll,
SynTPFcs.dll, VERSION.dll, BROWSEUI.dll,
browselc.dll, appHelp.dll, CLBCATQ.DLL,
OLEAUT32.dll, COMRes.dll, msctfime.ime,
Msimtf.dll, MSCTF.dll, UxTheme.dll,
WININET.dll, CRYPT32.dll, MSASN1.dll,
Secur32.dll, cscui.dll, CSCDLL.dll,
SETUPAPI.dll, AcroIEHelper.dll,
SDHelper.dll, olepro32.dll, NavShExt.dll,
ccTrust.dll, MSVCP60.dll, ATL.DLL,
tbhook.dll, ACTXPRXY.DLL, msi.dll, SXS.DLL,
urlmon.dll, shdoclc.dll, mlang.dll,
wsock32.dll, WS2_32.dll, WS2HELP.dll,
mswsock.dll, wshtcpip.dll, userenv.dll,
netapi32.dll, wintrust.dll, IMAGEHLP.dll,
schannel.dll, RASAPI32.DLL, rasman.dll,
TAPI32.dll, rtutils.dll, WINMM.dll,
SYNCOR11.DLL, sensapi.dll, rsaenh.dll,
DNSAPI.dll, winrnr.dll, WLDAP32.dll,
rasadhlp.dll, dssenh.dll, cryptnet.dll,
mshtml.dll, scrauth.dll, ScrBlock.dll,
jscript.dll, MSLS31.DLL, msohev.dll,
mshtmled.dll, wdmaud.drv, msacm32.drv,
MSACM32.dll, midimap.dll, Flash.ocx,
comdlg32.dll, ddrawex.dll, DDRAW.dll,
DCIMAN32.dll, imgutil.dll, dispex.dll,
plugin.ocx
realsched.exe 2008 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
SynTPFcs.dll,
VERSION.dll, msctfime.ime, msvcrt.dll,
ole32.dll, NTMARTA.DLL, WLDAP32.dll,
SAMLIB.dll, tbhook.dll
TBSYSTRY.EXE 428 ntdll.dll, kernel32.dll, WINMM.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, comdlg32.dll, SHLWAPI.dll,
msvcrt.dll, COMCTL32.dll, SHELL32.dll,
WINSPOOL.DRV, ole32.dll, IMM32.DLL,
LPK.DLL,
USP10.dll, SYNCOR11.DLL, comctl32.dll,
tbhook.dll, SynTPFcs.dll, VERSION.dll,
msctfime.ime, CLBCATQ.DLL, OLEAUT32.dll,
COMRes.dll, Hhctrl.ocx
ConnMngmntBox.exe 724 ntdll.dll, kernel32.dll, CracDlr.dll,
ole32.dll, GDI32.dll, USER32.dll,
ADVAPI32.dll, RPCRT4.dll, OLEAUT32.dll,
MSVCRT.DLL, Wswitch.dll, WINSPOOL.DRV,
comdlg32.dll, SHLWAPI.dll, COMCTL32.dll,
SHELL32.dll, VERSION.dll, oledlg.dll,
WS2_32.dll, WS2HELP.dll, IMM32.DLL,
LPK.DLL,
USP10.dll, comctl32.dll, SynTPFcs.dll,
CLBCATQ.DLL, COMRes.dll, msctfime.ime,
ConnMngmntRes.dll, ConnFilter.dll,
mRouterController.dll, tbhook.dll, msi.dll,
SXS.DLL
ECTaskScheduler.exe 976 ntdll.dll, kernel32.dll, Wswitch.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, WINSPOOL.DRV, msvcrt.dll,
comdlg32.dll, SHLWAPI.dll, COMCTL32.dll,
SHELL32.dll, ole32.dll, VERSION.dll,

oledlg.dll, OLEAUT32.dll, CracDlr.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
comctl32.dll,
SynTPFcs.dll, CLBCATQ.DLL, COMRes.dll,
msi.dll, SXS.DLL, ECTaskSchedulerRes.dll,
UNIFYT~1.DLL, ECTriggerResources.DLL,
tbhook.dll, ectui.dll, ECENGI~1.DLL,
OLEPRO32.DLL, rtsock.dll, CONNEC~1.DLL,
TIMETR~1.DLL, msctfime.ime, SCRFSProxy.dll
WZQKPICK.EXE 1888 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, USER32.dll, GDI32.dll,
SHELL32.dll, msvcrt.dll, SHLWAPI.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
comctl32.dll,
SynTPFcs.dll, VERSION.dll, msctfime.ime,
ole32.dll, UxTheme.dll, Msimtf.dll,
MSCTF.dll, tbhook.dll
Elogerr.exe 2056 ntdll.dll, kernel32.dll, Wswitch.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, WINSPOOL.DRV, msvcrt.dll,
comdlg32.dll, SHLWAPI.dll, COMCTL32.dll,
SHELL32.dll, ole32.dll, VERSION.dll,
oledlg.dll, OLEPRO32.DLL, OLEAUT32.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
comctl32.dll,
SynTPFcs.dll, msctfime.ime, ELGERRRS.DLL,
CLBCATQ.DLL, COMRes.dll, tbhook.dll,
msi.dll, SXS.DLL, ECTaskSchedulerRes.dll,
ECENGRES.DLL, SCRFS.exe
MSIMN.EXE 2156 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, USER32.dll, GDI32.dll,
SHLWAPI.dll, msvcrt.dll, IMM32.DLL,
LPK.DLL,
USP10.dll, MSOE.DLL, ATL.DLL, MSOERT2.dll,
ole32.dll, OLEAUT32.dll, MSOEACCT.dll,
INETCOMM.dll, comctl32.dll, acctres.dll,
inetres.dll, msoeres.dll, SynTPFcs.dll,
VERSION.dll, SHDOCVW.DLL, WININET.dll,
CRYPT32.dll, MSASN1.dll, Secur32.dll,
shell32.dll, CLBCATQ.DLL, COMRes.dll,
msident.dll, msidntld.dll, PSTOREC.DLL,
directdb.dll, msctfime.ime, shdoclc.dll,
Msimtf.dll, MSCTF.dll, UxTheme.dll,
mlang.dll, wab32.dll, wab32res.dll,
tbhook.dll, RASAPI32.DLL, rasman.dll,
WS2_32.dll, WS2HELP.dll, NETAPI32.dll,
TAPI32.dll, rtutils.dll, WINMM.dll,
SYNCOR11.DLL, mshtml.dll, sensapi.dll,
URLMON.DLL, USERENV.dll, rsaenh.dll,
WSOCK32.DLL, mswsock.dll, DNSAPI.dll,
winrnr.dll, WLDAP32.dll, rasadhlp.dll,
wshtcpip.dll, mshtmled.dll, MSLS31.DLL,
imgutil.dll, wdmaud.drv, msacm32.drv,
MSACM32.dll, midimap.dll, appHelp.dll,
cscui.dll, CSCDLL.dll, SETUPAPI.dll,
RICHED20.DLL, SXS.DLL, MSI.DLL, Hhctrl.ocx,
NTMARTA.DLL, SAMLIB.dll, itss.dll,
scrauth.dll, ScrBlock.dll, wintrust.dll,
IMAGEHLP.dll, cryptnet.dll, jscript.dll,
browseui.dll, MPR.dll, drprov.dll,
ntlanman.dll, NETUI0.dll, NETUI1.dll,
NETRAP.dll, davclnt.dll, wiashext.dll,
gdiplus.dll, sti.dll, CFGMGR32.dll
mRouterRuntime.exe 2188 ntdll.dll, kernel32.dll, WSOCK32.dll,
WS2_32.dll, msvcrt.dll, WS2HELP.dll,
ADVAPI32.dll, RPCRT4.dll,
mRouterGateway.DLL, USER32.dll, GDI32.dll,
comdlg32.dll, SHLWAPI.dll, COMCTL32.dll,
SHELL32.dll, WINSPOOL.DRV, ole32.dll,
OLEAUT32.dll, mRouterPropPages.DLL,
oledlg.dll, OLEPRO32.DLL, IMM32.DLL,
LPK.DLL, USP10.dll, comctl32.dll,
SynTPFcs.dll, VERSION.dll, CLBCATQ.DLL,
COMRes.dll, msctfime.ime,
mRouterController.dll, MROUTERTCP.DLL,
MROUTERSERIAL.DLL, MROUTERIRSOCKETS.DLL,
mRouterBluetooth.dll, MROUTERWINSOCK.DLL,
mswsock.dll, wshirda.dll, wtsapi32.dll,
WINSTA.dll, mRouterAccessPoint.dll,
wshtcpip.dll, tbhook.dll, msi.dll, SXS.DLL
cmd.exe 2480 ntdll.dll, kernel32.dll, msvcrt.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, IMM32.DLL, LPK.DLL, USP10.dll,
Apphelp.dll
BROADC~1.EXE 2680 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
ole32.dll, OLEAUT32.dll, MSVCRT.DLL,
IMM32.DLL, LPK.DLL, USP10.dll,
SynTPFcs.dll,
VERSION.dll, CLBCATQ.DLL, COMRes.dll,
tbhook.dll, msctfime.ime, msi.dll,
ECENGI~1.DLL, Wswitch.dll, WINSPOOL.DRV,
comdlg32.dll, SHLWAPI.dll, COMCTL32.dll,
SHELL32.dll, oledlg.dll, OLEPRO32.DLL,
CracDlr.dll, comctl32.dll, SXS.DLL,
rtsock.dll, SCRFSProxy.dll
SCRFS.exe 3772 ntdll.dll, kernel32.dll, Wswitch.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, WINSPOOL.DRV, msvcrt.dll,
comdlg32.dll, SHLWAPI.dll, COMCTL32.dll,
SHELL32.dll, ole32.dll, VERSION.dll,
oledlg.dll, CracDlr.dll, OLEAUT32.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
comctl32.dll,
SynTPFcs.dll, CLBCATQ.DLL, COMRes.dll,
msi.dll, SXS.DLL, tbhook.dll,
SCRFSProxy.dll, rtsock.dll, msctfime.ime
iexplore.exe 2560 ntdll.dll, kernel32.dll, msvcrt.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, SHLWAPI.dll, SHDOCVW.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
comctl32.dll,
SHELL32.dll, comctl32.dll, ole32.dll,
SynTPFcs.dll, VERSION.dll, BROWSEUI.dll,
browselc.dll, appHelp.dll, CLBCATQ.DLL,
OLEAUT32.dll, COMRes.dll, msctfime.ime,
Msimtf.dll, MSCTF.dll, UxTheme.dll,
WININET.dll, CRYPT32.dll, MSASN1.dll,
Secur32.dll, cscui.dll, CSCDLL.dll,
SETUPAPI.dll, AcroIEHelper.dll,
SDHelper.dll, olepro32.dll, NavShExt.dll,
ccTrust.dll, MSVCP60.dll, ATL.DLL,
urlmon.dll, shdoclc.dll, mlang.dll,
wsock32.dll, WS2_32.dll, WS2HELP.dll,
mswsock.dll, wshtcpip.dll, RASAPI32.DLL,
rasman.dll, NETAPI32.dll, TAPI32.dll,
rtutils.dll, WINMM.dll, SYNCOR11.DLL,
msi.dll, SXS.DLL, tbhook.dll, sensapi.dll,
USERENV.dll, rsaenh.dll, DNSAPI.dll,
winrnr.dll, WLDAP32.dll, rasadhlp.dll,
mshtml.dll, msohev.dll, scrauth.dll,
ScrBlock.dll, wintrust.dll, IMAGEHLP.dll,
cryptnet.dll, jscript.dll, MSLS31.DLL,
Flash.ocx, comdlg32.dll, wdmaud.drv,
msacm32.drv, MSACM32.dll, midimap.dll,

ddrawex.dll, DDRAW.dll, DCIMAN32.dll,
MPR.dll, imgutil.dll, mshtmled.dll,
MSRATING.DLL, msratelc.dll, vbscript.dll,
iepeers.dll, WINSPOOL.DRV, ACTXPRXY.DLL,
dispex.dll, drprov.dll, ntlanman.dll,
NETUI0.dll, NETUI1.dll, NETRAP.dll,
SAMLIB.dll, davclnt.dll, Msxml3.dll,
MSOXMLMF.DLL, ntshrui.dll, zipfldr.dll
msmsgs.exe 2268 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, GDI32.dll, USER32.dll,
ole32.dll, OLEAUT32.dll, MSVCRT.DLL,
COMCTL32.dll, SHLWAPI.dll, SHELL32.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
SynTPFcs.dll,
VERSION.dll, MSGSLANG.DLL, CLBCATQ.DLL,
COMRes.dll, msctfime.ime, SXS.DLL,
wtsapi32.dll, WINSTA.dll, es.dll,
WS2_32.dll, WS2HELP.dll, tbhook.dll,
msi.dll, ACTXPRXY.DLL, rtcimsp.dll,
WSOCK32.dll, rtcdll.dll, ATL.DLL,
Secur32.dll, WININET.dll, CRYPT32.dll,
MSASN1.dll, WINMM.dll, iphlpapi.dll,
DNSAPI.dll, SYNCOR11.DLL, termmgr.dll,
rtutils.dll, quartz.dll, mswsock.dll,
wshtcpip.dll, dxmrtp.dll, MSVFW32.dll,
DSOUND.dll, PSAPI.DLL, devenum.dll,
setupapi.dll, wdmaud.drv, msacm32.drv,
MSACM32.dll, midimap.dll, msdmo.dll,
dpnhupnp.dll, rasapi32.dll, rasman.dll,
NETAPI32.dll, TAPI32.dll, rsaenh.dll,
hnetcfg.dll, netshell.dll, credui.dll,
DHCPCSVC.DLL, wbemprox.dll, wbemcomn.dll,
wbemsvc.dll, fastprox.dll, USERENV.dll,
uxtheme.dll, mshtml.dll, URLMON.DLL,
mlang.dll, dpnlobby.dll, dplayx.dll,
Msimtf.dll, MSCTF.dll, wintrust.dll,
IMAGEHLP.dll, schannel.dll, sensapi.dll,
winrnr.dll, WLDAP32.dll, rasadhlp.dll,
dssenh.dll, shdocvw.dll
iexplore.exe 3312 ntdll.dll, kernel32.dll, msvcrt.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, SHLWAPI.dll, SHDOCVW.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
comctl32.dll,
SHELL32.dll, comctl32.dll, ole32.dll,
SynTPFcs.dll, VERSION.dll, BROWSEUI.dll,
browselc.dll, appHelp.dll, CLBCATQ.DLL,
OLEAUT32.dll, COMRes.dll, msctfime.ime,
Msimtf.dll, MSCTF.dll, UxTheme.dll,
WININET.dll, CRYPT32.dll, MSASN1.dll,
Secur32.dll, cscui.dll, CSCDLL.dll,
SETUPAPI.dll, AcroIEHelper.dll,
SDHelper.dll, olepro32.dll, NavShExt.dll,
ccTrust.dll, MSVCP60.dll, ATL.DLL,
urlmon.dll, shdoclc.dll, mlang.dll,
wsock32.dll, WS2_32.dll, WS2HELP.dll,
mswsock.dll, wshtcpip.dll, RASAPI32.DLL,
rasman.dll, NETAPI32.dll, TAPI32.dll,
rtutils.dll, WINMM.dll, SYNCOR11.DLL,
sensapi.dll, msi.dll, SXS.DLL, tbhook.dll,
USERENV.dll, rsaenh.dll, DNSAPI.dll,
winrnr.dll, WLDAP32.dll, rasadhlp.dll,
mshtml.dll, MSLS31.DLL, msohev.dll,
MPR.dll,
wdmaud.drv, msacm32.drv, MSACM32.dll,
midimap.dll, scrauth.dll, ScrBlock.dll,
wintrust.dll, IMAGEHLP.dll, cryptnet.dll,
jscript.dll, Flash.ocx, comdlg32.dll,
ddrawex.dll, DDRAW.dll, DCIMAN32.dll,
imgutil.dll, mshtmled.dll, Msxml3.dll,
MSOXMLMF.DLL, ACTXPRXY.DLL, dispex.dll,
drprov.dll, ntlanman.dll, NETUI0.dll,
NETUI1.dll, NETRAP.dll, SAMLIB.dll,
davclnt.dll, HLINK.DLL, MSRATING.DLL,
msratelc.dll, vbscript.dll, dxtrans.dll,
plugin.ocx, SwSupport.dll
iexplore.exe 144 ntdll.dll, kernel32.dll, msvcrt.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, SHLWAPI.dll, SHDOCVW.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
comctl32.dll,
SHELL32.dll, comctl32.dll, ole32.dll,
SynTPFcs.dll, VERSION.dll, BROWSEUI.dll,
browselc.dll, appHelp.dll, CLBCATQ.DLL,
OLEAUT32.dll, COMRes.dll, msctfime.ime,
Msimtf.dll, MSCTF.dll, UxTheme.dll,
WININET.dll, CRYPT32.dll, MSASN1.dll,
Secur32.dll, cscui.dll, CSCDLL.dll,
SETUPAPI.dll, AcroIEHelper.dll,
SDHelper.dll, olepro32.dll, NavShExt.dll,
ccTrust.dll, MSVCP60.dll, ATL.DLL,
urlmon.dll, shdoclc.dll, mlang.dll,
wsock32.dll, WS2_32.dll, WS2HELP.dll,
mswsock.dll, wshtcpip.dll, RASAPI32.DLL,
rasman.dll, NETAPI32.dll, TAPI32.dll,
rtutils.dll, WINMM.dll, SYNCOR11.DLL,
sensapi.dll, msi.dll, SXS.DLL, tbhook.dll,
USERENV.dll, rsaenh.dll, DNSAPI.dll,
winrnr.dll, WLDAP32.dll, rasadhlp.dll,
mshtml.dll, MSLS31.DLL, msohev.dll,
MPR.dll,
sti.dll, CFGMGR32.dll, wdmaud.drv,
msacm32.drv, MSACM32.dll, midimap.dll,
scrauth.dll, ScrBlock.dll, wintrust.dll,
IMAGEHLP.dll, cryptnet.dll, jscript.dll,
iepeers.dll, WINSPOOL.DRV, vbscript.dll,
Flash.ocx, comdlg32.dll, ACTXPRXY.DLL,
ddrawex.dll, DDRAW.dll, DCIMAN32.dll,
mshtmled.dll, HLINK.DLL, imgutil.dll,
dispex.dll, drprov.dll, ntlanman.dll,
NETUI0.dll, NETUI1.dll, NETRAP.dll,
SAMLIB.dll, davclnt.dll
AcroRd32.exe 3444 ntdll.dll, kernel32.dll, AGM.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, CoolType.dll, SHELL32.dll,
msvcrt.dll, SHLWAPI.dll, ole32.dll,
WINMM.dll, VERSION.dll, COMCTL32.dll,
oledlg.dll, WINSPOOL.DRV, comdlg32.dll,
OLEAUT32.dll, JP2KLib.dll, OPP.dll,
BIB.dll,
ACE.dll, IMM32.DLL, LPK.DLL, USP10.dll,
SYNCOR11.DLL, SynTPFcs.dll, msctfime.ime,
UxTheme.dll, Msimtf.dll, MSCTF.dll,
SETUPAPI.dll, ATMLIB.dll, ADMPlugin.apl,
ExpressViews.apl, MSVCP60.dll, CLBCATQ.DLL,
COMRes.dll, msi.dll, INKOBJ.DLL, ATL.DLL,
gdiplus.dll, MSIMG32.dll, tbhook.dll,
Accessibility.api, AcroForm.api,
Annots.api,
DigSig.api, eBook.api, EScript.api,
EWH32.api, HLS.api, IA32.api,
ImageViewer.API, MSVFW32.dll,
MakeAccessible.api, Multimedia.api,
PDDom.api, PictureTasks.api, PPKLite.api,
printme.api, reflow.api, SaveAsRTF.api,

Search.api, Search5.api, SendMail.api,
Soap.api, Updater.api, esdupdate.dll,
WININET.dll, CRYPT32.dll, MSASN1.dll,
weblink.api, XFA.api, Secur32.dll,
mscms.dll, riched20.dll, SXS.DLL,
Rasapi32.dll, rasman.dll, WS2_32.dll,
WS2HELP.dll, NETAPI32.dll, TAPI32.dll,
rtutils.dll, mswsock.dll, DNSAPI.dll,
winrnr.dll, WLDAP32.dll, rasadhlp.dll,
Wtsapi32.dll, WINSTA.dll, appHelp.dll,
cscui.dll, CSCDLL.dll, ntshrui.dll,
USERENV.dll, MPR.dll, drprov.dll,
ntlanman.dll, NETUI0.dll, NETUI1.dll,
NETRAP.dll, SAMLIB.dll, davclnt.dll
WISPTIS.EXE 2256 ntdll.dll, kernel32.dll, msvcrt.dll,
ATL.DLL, ADVAPI32.dll, RPCRT4.dll,
GDI32.dll, USER32.dll, MSVCP60.dll,
HID.DLL,
ole32.dll, OLEAUT32.dll, SETUPAPI.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
SynTPFcs.dll,
VERSION.dll, msctfime.ime, wtsapi32.dll,
WINSTA.dll, CLBCATQ.DLL, COMRes.dll,
msi.dll, TPCPS.DLL, tbhook.dll
HomeSite+.exe 2912 ntdll.dll, kernel32.dll, user32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
oleaut32.dll, MSVCRT.DLL, OLE32.DLL,
mpr.dll, version.dll, comctl32.dll,
imm32.dll, winspool.drv, shell32.dll,
SHLWAPI.dll, comdlg32.dll, winmm.dll,
ssce5332.dll, msvfw32.dll, avifil32.dll,
MSACM32.dll, LPK.DLL, USP10.dll,
comctl32.dll, SYNCOR11.DLL, SynTPFcs.dll,
msctfime.ime, olepro32.dll, CLBCATQ.DLL,
COMRes.dll, wddx_com.dll, xmlparse.dll,
xmltok.dll, MSVCP60.dll, SXS.DLL,
Msimtf.dll, MSCTF.dll, tbhook.dll,
XceedZip.dll, DCIMAN32.DLL, SETUPAPI.dll,
appHelp.dll, cscui.dll, CSCDLL.dll,
ntshrui.dll, ATL.DLL, NETAPI32.dll,
USERENV.dll, TSHook.dll, drprov.dll,
ntlanman.dll, NETUI0.dll, NETUI1.dll,
NETRAP.dll, SAMLIB.dll, davclnt.dll,
wiashext.dll, gdiplus.dll, WININET.dll,
CRYPT32.dll, MSASN1.dll, sti.dll,
CFGMGR32.dll, cfvalidator.dll,
cfmlvalidator.dll, lang_cfml.dll,
xml_datagrove.dll, MFC42.DLL, CFRegExp.dll
putty.exe 292 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, USER32.dll, GDI32.dll,
COMCTL32.dll, comdlg32.dll, SHLWAPI.dll,
msvcrt.dll, SHELL32.dll, WSOCK32.dll,
WS2_32.dll, WS2HELP.dll, IMM32.DLL,
LPK.DLL,
USP10.dll, comctl32.dll, SynTPFcs.dll,
VERSION.dll, msctfime.ime, ole32.dll,
Msimtf.dll, MSCTF.dll, tbhook.dll,
mswsock.dll, DNSAPI.dll, winrnr.dll,
WLDAP32.dll, rasadhlp.dll, wshtcpip.dll
putty.exe 3740 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, USER32.dll, GDI32.dll,
COMCTL32.dll, comdlg32.dll, SHLWAPI.dll,
msvcrt.dll, SHELL32.dll, WSOCK32.dll,
WS2_32.dll, WS2HELP.dll, IMM32.DLL,
LPK.DLL,
USP10.dll, comctl32.dll, SynTPFcs.dll,
VERSION.dll, msctfime.ime, ole32.dll,
Msimtf.dll, MSCTF.dll, mswsock.dll,
wshtcpip.dll, tbhook.dll
iexplore.exe 1116 ntdll.dll, kernel32.dll, msvcrt.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, SHLWAPI.dll, SHDOCVW.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
comctl32.dll,
SHELL32.dll, comctl32.dll, ole32.dll,
SynTPFcs.dll, VERSION.dll, BROWSEUI.dll,
browselc.dll, appHelp.dll, CLBCATQ.DLL,
OLEAUT32.dll, COMRes.dll, msctfime.ime,
Msimtf.dll, MSCTF.dll, UxTheme.dll,
WININET.dll, CRYPT32.dll, MSASN1.dll,
Secur32.dll, cscui.dll, CSCDLL.dll,
SETUPAPI.dll, AcroIEHelper.dll,
SDHelper.dll, olepro32.dll, NavShExt.dll,
ccTrust.dll, MSVCP60.dll, ATL.DLL,
urlmon.dll, shdoclc.dll, mlang.dll,
wsock32.dll, WS2_32.dll, WS2HELP.dll,
mswsock.dll, wshtcpip.dll, RASAPI32.DLL,
rasman.dll, NETAPI32.dll, TAPI32.dll,
rtutils.dll, WINMM.dll, SYNCOR11.DLL,
sensapi.dll, msi.dll, SXS.DLL, tbhook.dll,
USERENV.dll, rsaenh.dll, DNSAPI.dll,
winrnr.dll, WLDAP32.dll, rasadhlp.dll,
mshtml.dll, MSLS31.DLL, msohev.dll,
MPR.dll,
sti.dll, CFGMGR32.dll, wdmaud.drv,
msacm32.drv, MSACM32.dll, midimap.dll,
scrauth.dll, ScrBlock.dll, wintrust.dll,
IMAGEHLP.dll, cryptnet.dll, jscript.dll,
mshtmled.dll, iepeers.dll, WINSPOOL.DRV,
imgutil.dll, pngfilt.dll, ACTXPRXY.DLL,
Flash.ocx, comdlg32.dll, SwSupport.dll,
ddrawex.dll, DDRAW.dll, DCIMAN32.dll,
Msxml3.dll, drprov.dll, ntlanman.dll,
NETUI0.dll, NETUI1.dll, NETRAP.dll,
SAMLIB.dll, davclnt.dll, vbscript.dll
tasklist.exe 1344 ntdll.dll, kernel32.dll, msvcrt.dll,
ADVAPI32.dll, RPCRT4.dll, USER32.dll,
GDI32.dll, MPR.dll, ole32.dll,
OLEAUT32.dll,
Secur32.dll, WS2_32.dll, WS2HELP.dll,
framedyn.dll, NETAPI32.dll, DBGHELP.dll,
VERSION.dll, IMM32.DLL, LPK.DLL, USP10.dll,
SynTPFcs.dll, CLBCATQ.DLL, COMRes.dll,
wbemprox.dll, wbemcomn.dll, Winsta.dll,
wbemsvc.dll, fastprox.dll
wmiprvse.exe 2944 ntdll.dll, kernel32.dll, msvcrt.dll,
ADVAPI32.dll, RPCRT4.dll, USER32.dll,
GDI32.dll, FastProx.dll, wbemcomn.dll,
OLEAUT32.dll, OLE32.DLL, NCObjAPI.DLL,
IMM32.DLL, LPK.DLL, USP10.dll, CLBCATQ.DLL,
COMRes.dll, VERSION.dll, wbemprox.dll,
wbemsvc.dll, wmiutils.dll, cimwin32.dll,
framedyn.dll, Secur32.dll, SETUPAPI.dll,
WTSAPI32.dll, WINSTA.dll, CFGMGR32.DLL,
WMI.DLL, NETAPI32.DLL

"Chris Cox" > wrote in message
...
> OK, I'll try that next time.
>
> I've run TaskList and have the file. Should I post it in message, email
it
> to you or post it on a forum somewhere?
>
> Cheers,
> Chris
>
> "Ramesh [MVP]" > wrote in message
> ...
> Chris, You don't need to set the option to run on next boot. Create a
> shortcut for it and launch once you're logged on. BTW, have you tried
> Tasklist /M >c:\ListTasks.txt ?
>
> --
> Ramesh - Microsoft MVP
> Windows XP Shell/User
> http://www.mvps.org/sramesh2k
>
> AumHa VSOP: http://www.aumha.org
>
> "Chris Cox" > wrote in message
> ...
> Ramesh,
>
> I tried this. The Regmon tool I set to run on next boot and my machine
> wouldn't start. Needed to use "last known good configuration" to get
going.
>
> Nothing else seemed to bring up anything that sparked alarm bells with me.
>
> Chris
>
> "Ramesh [MVP]" > wrote in message
> ...
> Chris,
>
> >> error saying "Server is busy" with options to "Switch to" or "Retry".
>
> You may try R'Mon from Sysinternals. Load R'Mon and track all the
processes
> when you see this errors and note down the process names causing this at
> that time (turn on "Clock Time" option, that would be useful). If running
XP
> Pro, type :
>
> "Tasklist /M C:\ListTasks.txt" (from Command Prompt) and have a look at
the
> ListTasks.txt file to know what's going on.
>
> For XP Home, get a copy of Tasklist from here:
> http://www.mvps.org/sramesh2k/utils/tasklist.exe
>
> Then, start MSCONFIG and switch to Services tab. Check "Hide all Microsoft
> services", have a look at what are the additional ones left out, and do a
> drill-down on each service. Additionally, get Autoruns from
> www.sysinternals.com It catches many startup entries which MSCONFIG or
> HijackThis will not. Generate a Log file using Autoruns.
>
> --
> Ramesh - Microsoft MVP
> Windows XP Shell/User
> http://www.mvps.org/sramesh2k
>
> AumHa VSOP: http://www.aumha.org
>
> "Chris Cox" > wrote in message
> ...
> "TheRosey1" > wrote in message
> ...
> > So essentially I still have spyware on my machine that Ad-Aware, Spybot
&
> CWshred all missed?
>
> There were elements of BlazeFind that Ad-Aware didn't pick up until I
> cranked up the sensitivity and depth of its searching.
>
> Even then there were specific items in the HijackThis log that needed to
be
> removed manually.
>
> Can't recall exactly where the instructions for improving Ad-Aware were,
but
> they were similar to this:
> http://www.cjwd.demon.co.uk/spybot-adaware.html
>
> I also posted my HijackThis log at:
> http://www.wilderssecurity.com/forumdisplay.php?f=26
>
> There's a couple of good guys there that go through your log and check it
> out. Luckily for me, between Ad-Aware and Ramesh I'd already cleaned it
;-)
>
> I still have a bit of weird behaviour on my machine though.
Intermittently
> it will either crash and reboot itself after logging in, or it will flash
up
> an error saying "Server is busy" with options to "Switch to" or "Retry".
> Switch to brings up the Start Menu, Retry does nothing.
>
> Haven't worked out what process is causing that, but there's nothing in my
> HijackThis log to suggest there's anything Spyware related.
>
> I may have to relent and reinstall my OS anyway. But hey, my QL bar is
> staying put ;-)
>
> Chris
>
>
>
>
Ramesh [MVP]
June 23rd 04, 07:44 AM
That's a huge log :)

BTW, did you also check Event Viewer for failed services or warning =
entries? Another option, perform a clean boot.

--=20
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

"Chris Cox" > wrote in message =
...
TaskList log as requested. Note that I was running some applications at =
the
time (IE, HomeSite, Putty etc):
Chris Cox
June 23rd 04, 07:44 AM
Like I said, I was running some stuff ;-)

I've had a look at the Event Viewer, and the following error happens every
boot:

"Automatic certificate enrollment for local system failed to contact the
active directory (0x8007054b). The specified domain either does not exist or
could not be contacted.
Enrollment will not be performed."

No other warnings or errors.

"Ramesh [MVP]" > wrote in message
...
That's a huge log :)

BTW, did you also check Event Viewer for failed services or warning entries?
Another option, perform a clean boot.

--
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

"Chris Cox" > wrote in message
...
TaskList log as requested. Note that I was running some applications at the
time (IE, HomeSite, Putty etc):
Ramesh [MVP]
June 23rd 04, 07:44 AM
JSI Tip 4555. Windows XP Autoenrollment cannot reach an Active Directory =
domain controller?:=20
http://www.jsiinc.com/SUBJ/tip4500/rh4555.htm

--=20
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

"Chris Cox" > wrote in message =
...
Like I said, I was running some stuff ;-)

I've had a look at the Event Viewer, and the following error happens =
every
boot:

"Automatic certificate enrollment for local system failed to contact the
active directory (0x8007054b). The specified domain either does not =
exist or
could not be contacted.
Enrollment will not be performed."

No other warnings or errors.

"Ramesh [MVP]" > wrote in message
...
That's a huge log :)

BTW, did you also check Event Viewer for failed services or warning =
entries?
Another option, perform a clean boot.

--=20
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

"Chris Cox" > wrote in message
...
TaskList log as requested. Note that I was running some applications at =
the
time (IE, HomeSite, Putty etc):
Chris Cox
June 23rd 04, 07:44 AM
Thanks :-) Well that's one more thing to clean it up.

I'm about to try a reboot so I'll post some other stuff from TaskList and
Regmon shortly.

"Ramesh [MVP]" > wrote in message
...
JSI Tip 4555. Windows XP Autoenrollment cannot reach an Active Directory
domain controller?:
http://www.jsiinc.com/SUBJ/tip4500/rh4555.htm

--
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

"Chris Cox" > wrote in message
...
Like I said, I was running some stuff ;-)

I've had a look at the Event Viewer, and the following error happens every
boot:

"Automatic certificate enrollment for local system failed to contact the
active directory (0x8007054b). The specified domain either does not exist or
could not be contacted.
Enrollment will not be performed."

No other warnings or errors.

"Ramesh [MVP]" > wrote in message
...
That's a huge log :)

BTW, did you also check Event Viewer for failed services or warning entries?
Another option, perform a clean boot.

--
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

"Chris Cox" > wrote in message
...
TaskList log as requested. Note that I was running some applications at the
time (IE, HomeSite, Putty etc):
Chris Cox
June 23rd 04, 08:42 AM
OK, Regmon generated a 14Mb logfile so I won't be posting that! Hehe.
Haven't seen the "Switch to"/"Retry" error since my crash this morning.

Here's the fresher TaskList:


Image Name PID Modules
========================= ======
=============================================
System Idle Process 0 N/A
System 4 N/A
smss.exe 584 ntdll.dll
csrss.exe 640 ntdll.dll, CSRSRV.dll, basesrv.dll,
winsrv.dll, USER32.dll, KERNEL32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
LPK.DLL, USP10.dll, sxs.dll
winlogon.exe 664 ntdll.dll, kernel32.dll, msvcrt.dll,
ADVAPI32.dll, RPCRT4.dll, GDI32.dll,
USER32.dll, USERENV.dll, NDdeApi.dll,
CRYPT32.dll, MSASN1.dll, Secur32.dll,
WINSTA.dll, PROFMAP.dll, NETAPI32.dll,
REGAPI.dll, WS2_32.dll, WS2HELP.dll,
AUTHZ.dll, PSAPI.DLL, VERSION.dll,
SETUPAPI.dll, IMM32.DLL, LPK.DLL,
USP10.dll,
MSGINA.dll, SHELL32.dll, SHLWAPI.dll,
COMCTL32.dll, ODBC32.dll, comdlg32.dll,
comctl32.dll, odbcint.dll, SHSVCS.dll,
sfc.dll, sfc_os.dll, WINTRUST.dll,
ole32.dll, IMAGEHLP.dll, msctfime.ime,
WINSCARD.DLL, WTSAPI32.dll, cscdll.dll,
rsaenh.dll, WlNotify.dll, WINMM.dll,
WINSPOOL.DRV, MPR.dll, SYNCOR11.DLL,
UxTheme.dll, sxs.dll, msv1_0.dll,
wldap32.dll, SAMLIB.dll, cscui.dll,
drprov.dll, ntlanman.dll, NETUI0.dll,
NETUI1.dll, NETRAP.dll, davclnt.dll,
wdmaud.drv, COMRes.dll, OLEAUT32.dll,
CLBCATQ.DLL, msacm32.drv, MSACM32.dll,
midimap.dll, NTMARTA.DLL, Cabinet.dll
services.exe 708 ntdll.dll, kernel32.dll, msvcrt.dll,
ADVAPI32.dll, RPCRT4.dll, USER32.dll,
GDI32.dll, USERENV.dll, SCESRV.dll,
AUTHZ.dll, umpnpmgr.dll, WINSTA.dll,
NCObjAPI.DLL, IMM32.DLL, LPK.DLL,
USP10.dll,
secur32.dll, eventlog.dll, WS2_32.dll,
WS2HELP.dll, PSAPI.DLL, wtsapi32.dll,
netapi32.dll, Apphelp.dll
lsass.exe 720 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, LSASRV.dll, msvcrt.dll,
Secur32.dll, USER32.dll, GDI32.dll,
SAMSRV.dll, cryptdll.dll, DNSAPI.dll,
WS2_32.dll, WS2HELP.dll, MSASN1.dll,
NETAPI32.dll, SAMLIB.dll, MPR.dll,
NTDSAPI.dll, WLDAP32.dll, IMM32.DLL,
LPK.DLL, USP10.dll, msprivs.dll,
kerberos.dll, msv1_0.dll, netlogon.dll,

w32time.dll, MSVCP60.dll, iphlpapi.dll,
USERENV.dll, schannel.dll, CRYPT32.dll,
wdigest.dll, rsaenh.dll, setupapi.dll,
scecli.dll, OLEAUT32.dll, OLE32.DLL,
shell32.dll, SHLWAPI.dll, comctl32.dll,
comctl32.dll, mswsock.dll, wshtcpip.dll,
ipsecsvc.dll, oakley.DLL, WINIPSEC.DLL,
pstorsvc.dll, psbase.dll, dssenh.dll
svchost.exe 896 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, rpcss.dll, msvcrt.dll,
WS2_32.dll, WS2HELP.dll, USER32.dll,
GDI32.dll, Secur32.dll, IMM32.DLL, LPK.DLL,
USP10.dll, userenv.dll, rsaenh.dll,
mswsock.dll, wshtcpip.dll, DNSAPI.dll,
iphlpapi.dll, winrnr.dll, WLDAP32.dll,
rasadhlp.dll, CLBCATQ.DLL, ole32.dll,
OLEAUT32.dll, COMRes.dll, VERSION.dll,
Apphelp.dll
svchost.exe 1056 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, ole32.dll, GDI32.dll,
USER32.dll, IMM32.DLL, LPK.DLL, USP10.dll,
dhcpcsvc.dll, msvcrt.dll, DNSAPI.dll,
WS2_32.dll, WS2HELP.dll, iphlpapi.dll,
Secur32.dll, mswsock.dll, wshtcpip.dll,
termsrv.dll, ICAAPI.dll, OLEAUT32.dll,
AUTHZ.dll, mstlsapi.dll, ACTIVEDS.dll,
adsldpc.dll, NETAPI32.dll, WLDAP32.dll,
ATL.DLL, CRYPT32.dll, MSASN1.dll,
wzcsvc.dll, rtutils.dll, WMI.dll,
WTSAPI32.dll, WINSTA.dll, SHLWAPI.dll,
ESENT.dll, irmon.dll, SHELL32.dll,
USERENV.dll, comctl32.dll, comctl32.dll,
REGAPI.dll, rsaenh.dll, winmm.dll,
SYNCOR11.DLL, VERSION.dll, wshirda.dll,
NTMARTA.DLL, SAMLIB.dll, SETUPAPI.DLL,
rastls.dll, CRYPTUI.dll, WINTRUST.dll,
IMAGEHLP.dll, WININET.dll, MPRAPI.dll,
RASAPI32.dll, rasman.dll, TAPI32.dll,
SCHANNEL.dll, WinSCard.dll, raschap.dll,
shsvcs.dll, msv1_0.dll, CLBCATQ.DLL,
COMRes.dll, schedsvc.dll, NTDSAPI.dll,
MSIDLE.DLL, audiosrv.dll, wkssvc.dll,
cryptsvc.dll, certcli.dll, es.dll,
ersvc.dll, pchsvc.dll, srvsvc.dll,
msgsvc.dll, netman.dll, seclogon.dll,
sens.dll, srsvc.dll, POWRPROF.dll,
trkwks.dll, winspool.drv, tapisrv.dll,
PSAPI.DLL, browser.dll, wuauserv.dll,
mspmspsv.dll, wmisvc.dll, wbemcomn.dll,
VSSAPI.DLL, wuaueng.dll, ADVPACK.dll,
sfc.dll, sfc_os.dll, w32time.dll,
MSVCP60.dll, rasmans.dll, WINIPSEC.DLL,
netcfgx.dll, CLUSAPI.dll, SXS.DLL,
comsvcs.dll, MTXCLU.DLL, WSOCK32.dll,
colbact.DLL, RESUTILS.DLL, rastapi.dll,
unimdm.tsp, uniplat.dll, mtxoci.dll,
unimdmat.dll, modemui.dll, kmddsp.tsp,
ndptsp.tsp, ipconf.tsp, h323.tsp,
hidphone.tsp, HID.DLL, rasppp.dll,
ntlsapi.dll, ipnathlp.dll, netshell.dll,
credui.dll, HNetCfg.dll, msctfime.ime,
rasadhlp.dll, wbemcore.dll, esscli.dll,
FastProx.dll, wbemsvc.dll, wmiutils.dll,
repdrvfs.dll, wmiprvsd.dll, NCObjAPI.DLL,
wbemess.dll, upnp.dll, SSDPAPI.dll,
msi.dll,
RASDLG.dll, winhttp.dll, ncprov.dll
svchost.exe 1216 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, dnsrslvr.dll, msvcrt.dll,
USER32.dll, GDI32.dll, DNSAPI.dll,
WS2_32.dll, WS2HELP.dll, iphlpapi.dll,
IMM32.DLL, LPK.DLL, USP10.dll, mswsock.dll,
wshtcpip.dll
svchost.exe 1248 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, ole32.dll, GDI32.dll,
USER32.dll, IMM32.DLL, LPK.DLL, USP10.dll,
lmhsvc.dll, msvcrt.dll, iphlpapi.dll,
WS2_32.dll, WS2HELP.dll, webclnt.dll,
WININET.dll, CRYPT32.dll, MSASN1.dll,
OLEAUT32.dll, SHLWAPI.dll, comctl32.dll,
shell32.dll, comctl32.dll, Secur32.dll,
wsock32.dll, mswsock.dll, DNSAPI.dll,
rasadhlp.dll, regsvc.dll, RASAPI32.DLL,
rasman.dll, NETAPI32.dll, TAPI32.dll,
rtutils.dll, WINMM.dll, SYNCOR11.DLL,
sensapi.dll, winrnr.dll, WLDAP32.dll,
wshtcpip.dll, ssdpsrv.dll
spoolsv.exe 1460 ntdll.dll, kernel32.dll, msvcrt.dll,
ADVAPI32.dll, RPCRT4.dll, GDI32.dll,
USER32.dll, IMM32.DLL, LPK.DLL, USP10.dll,
SPOOLSS.DLL, WS2_32.dll, WS2HELP.dll,
DNSAPI.dll, rasadhlp.dll, localspl.dll,
ole32.dll, OLEAUT32.dll, VERSION.dll,
Secur32.dll, sfc_os.dll, WINTRUST.dll,
CRYPT32.dll, MSASN1.dll, IMAGEHLP.dll,
USERENV.dll, winspool.drv, netapi32.dll,
cnbjmon.dll, mswsock.dll, mdimon.dll,
msi.dll, pjlmon.dll, tcpmon.dll,
usbmon.dll,
mdippr.dll, winrnr.dll, WLDAP32.dll,
win32spl.dll, NETRAP.dll, CLBCATQ.DLL,
COMRes.dll, inetpp.dll, icmp.dll,
iphlpapi.DLL
alg.exe 1600 ntdll.dll, kernel32.dll, msvcrt.dll,
ATL.DLL, ADVAPI32.dll, RPCRT4.dll,
ole32.dll, GDI32.dll, USER32.dll,
OLEAUT32.dll, WSOCK32.dll, WS2_32.dll,
WS2HELP.dll, MSWSOCK.dll, IMM32.DLL,
LPK.DLL, USP10.dll, CLBCATQ.DLL,
COMRes.dll,
VERSION.dll, hnetcfg.dll, RASAPI32.dll,
rasman.dll, NETAPI32.dll, TAPI32.dll,
SHLWAPI.dll, rtutils.dll, WINMM.dll,
netshell.dll, credui.dll, SHELL32.dll,
iphlpapi.dll, DHCPCSVC.DLL, DNSAPI.dll,
Secur32.dll, WININET.dll, CRYPT32.dll,
MSASN1.dll, SYNCOR11.DLL, comctl32.dll,
comctl32.dll, wshtcpip.dll
ati2evxx.exe 1612 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
msctfime.ime,
msvcrt.dll, ole32.dll
ccEvtMgr.exe 1720 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
ole32.dll, OLEAUT32.dll, MSVCRT.DLL,
MSVCP60.dll, ccTrust.dll, VERSION.dll,
SYMSTORE.dll, SHLWAPI.dll, MSVCIRT.dll,
IMM32.DLL, LPK.DLL, USP10.dll, Secur32.dll,
CRYPT32.dll, MSASN1.dll, rsaenh.dll,
userenv.dll, netapi32.dll, cryptnet.dll,
WLDAP32.dll, wininet.dll, comctl32.dll,

shell32.dll, comctl32.dll, wsock32.dll,
WS2_32.dll, WS2HELP.dll, NAVEvent.dll,
ccEvt.dll, CLBCATQ.DLL, COMRes.dll,
msi.dll,
SXS.DLL
Navapsvc.exe 1884 ntdll.dll, kernel32.dll, MSVCP60.dll,
MSVCRT.dll, USER32.dll, GDI32.dll,
ADVAPI32.dll, RPCRT4.dll, ole32.dll,
OLEAUT32.dll, SavRT32.dll, IMM32.DLL,
LPK.DLL, USP10.dll, CLBCATQ.DLL,
COMRes.dll,
VERSION.dll, msi.dll, SXS.DLL
svchost.exe 400 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, wiaservc.dll, msvcrt.dll,
USER32.dll, GDI32.dll, OLEAUT32.dll,
OLE32.DLL, SHLWAPI.dll, CFGMGR32.dll,
setupapi.dll, USERENV.dll, mscms.dll,
WINSPOOL.DRV, WINSTA.dll, VERSION.dll,
IMM32.DLL, LPK.DLL, USP10.dll, CLBCATQ.DLL,
COMRes.dll, ACTXPRXY.DLL, sti.dll
explorer.exe 1692 ntdll.dll, kernel32.dll, msvcrt.dll,
ADVAPI32.dll, RPCRT4.dll, GDI32.dll,
USER32.dll, SHLWAPI.dll, SHELL32.dll,
ole32.dll, OLEAUT32.dll, BROWSEUI.dll,
SHDOCVW.dll, UxTheme.dll, IMM32.DLL,
LPK.DLL, USP10.dll, comctl32.dll,
comctl32.dll, msctfime.ime, appHelp.dll,
CLBCATQ.DLL, COMRes.dll, VERSION.dll,
cscui.dll, CSCDLL.dll, themeui.dll,
Secur32.dll, MSIMG32.dll, Msimtf.dll,
MSCTF.dll, USERENV.dll, ACTXPRXY.DLL,
WININET.dll, CRYPT32.dll, MSASN1.dll,
LINKINFO.dll, ntshrui.dll, ATL.DLL,
NETAPI32.dll, urlmon.dll, WINTRUST.dll,
IMAGEHLP.dll, rsaenh.dll, WINSTA.dll,
webcheck.dll, stobject.dll, BatMeter.dll,
POWRPROF.dll, SETUPAPI.dll, WTSAPI32.dll,
SynTPFcs.dll, WINMM.dll, SYNCOR11.DLL,
wdmaud.drv, msacm32.drv, MSACM32.dll,
midimap.dll, NETSHELL.dll, credui.dll,
WS2_32.dll, WS2HELP.dll, iphlpapi.dll,
msi.dll, tbhook.dll, printui.dll,
WINSPOOL.DRV, ACTIVEDS.dll, adsldpc.dll,
WLDAP32.dll, CFGMGR32.dll, MPR.dll,
drprov.dll, ntlanman.dll, NETUI0.dll,
NETUI1.dll, NETRAP.dll, SAMLIB.dll,
davclnt.dll, browselc.dll, MSVCP60.dll,
DUSER.dll, shdoclc.dll, sti.dll,
CfShellFtpRds.dll, cfssvradmin.dll,
comdlg32.dll, CFFileProxy.dll
atiptaxx.exe 324 ntdll.dll, kernel32.dll, RPCRT4.dll,
ADVAPI32.dll, USER32.dll, GDI32.dll,
SHELL32.dll, msvcrt.dll, SHLWAPI.dll,
VERSION.dll, ole32.dll, IMM32.DLL, LPK.DLL,
USP10.dll, comctl32.dll, comctl32.dll,
ATRPUIXX.ENU, CLBCATQ.DLL, OLEAUT32.dll,
COMRes.dll, atipdsxx.dll, msctfime.ime,
tbhook.dll
ltmsg.exe 348 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
msctfime.ime,
msvcrt.dll, ole32.dll, tbhook.dll
SynTPLpr.exe 1708 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
VERSION.dll, IMM32.DLL, LPK.DLL, USP10.dll,
SynTPFcs.dll, msctfime.ime, msvcrt.dll,
ole32.dll, tbhook.dll
SynTPEnh.exe 560 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
comdlg32.dll, SHLWAPI.dll, msvcrt.dll,
COMCTL32.dll, SHELL32.dll, ole32.dll,
VERSION.dll, IMM32.DLL, LPK.DLL, USP10.dll,
comctl32.dll, msctfime.ime, SynTPAPI.dll,
SynTPFcs.dll, tbhook.dll
eabservr.exe 532 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
SHELL32.dll, msvcrt.dll, SHLWAPI.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
comctl32.dll,
comctl32.dll, EABCOMN.DLL, ole32.dll,
SETUPAPI.dll, newdev.dll, WININET.dll,
CRYPT32.dll, MSASN1.dll, OLEAUT32.dll,
credui.dll, CPQINFO.DLL, SynTPFcs.dll,
VERSION.dll, msctfime.ime, tbhook.dll
ccApp.exe 632 ntdll.dll, kernel32.dll, SYMSTORE.dll,
ADVAPI32.dll, RPCRT4.dll, MSVCRT.dll,
COMCTL32.dll, GDI32.dll, USER32.dll,
ole32.dll, MSVCP60.dll, IMM32.DLL, LPK.DLL,
USP10.dll, msctfime.ime, wintrust.dll,
CRYPT32.dll, MSASN1.dll, IMAGEHLP.dll,
rsaenh.dll, VERSION.dll, userenv.dll,
secur32.dll, netapi32.dll, cryptnet.dll,
WLDAP32.dll, wininet.dll, OLEAUT32.dll,
SHLWAPI.dll, comctl32.dll, shell32.dll,
wsock32.dll, WS2_32.dll, WS2HELP.dll,
CCEMLPXY.DLL, SYMREDIR.dll, MSWSOCK.dll,
ccErrDsp.DLL, CCREGMON.DLL, ccEvt.DLL,
ccTrust.dll, DNSAPI.dll, CCIMSCAN.DLL,
ATL.DLL, DEFALERT.DLL, NAVAPW32.DLL,
ccPasswd.DLL, apwutil.dll, SavRT32.dll,
CLBCATQ.DLL, COMRes.dll, tbhook.dll,
winrnr.dll, apwcmdnt.dll, rasadhlp.dll,
SynTPFcs.dll, mstask.dll, MPR.dll,
comdlg32.dll, Msimtf.dll, MSCTF.dll,
msi.dll, NavEmail.dll, SXS.DLL,
wshtcpip.dll, msgsc.dll, ACTXPRXY.DLL
realsched.exe 1656 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
SynTPFcs.dll,
VERSION.dll, msctfime.ime, msvcrt.dll,
ole32.dll, NTMARTA.DLL, WLDAP32.dll,
SAMLIB.dll, tbhook.dll
TBSYSTRY.EXE 2008 ntdll.dll, kernel32.dll, WINMM.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, comdlg32.dll, SHLWAPI.dll,
msvcrt.dll, COMCTL32.dll, SHELL32.dll,
WINSPOOL.DRV, ole32.dll, IMM32.DLL,
LPK.DLL,
USP10.dll, SYNCOR11.DLL, comctl32.dll,
tbhook.dll, SynTPFcs.dll, VERSION.dll,
msctfime.ime, CLBCATQ.DLL, OLEAUT32.dll,
COMRes.dll, Hhctrl.ocx
ConnMngmntBox.exe 1164 ntdll.dll, kernel32.dll, CracDlr.dll,
ole32.dll, GDI32.dll, USER32.dll,
ADVAPI32.dll, RPCRT4.dll, OLEAUT32.dll,
MSVCRT.DLL, Wswitch.dll, WINSPOOL.DRV,
comdlg32.dll, SHLWAPI.dll, COMCTL32.dll,
SHELL32.dll, VERSION.dll, oledlg.dll,
WS2_32.dll, WS2HELP.dll, IMM32.DLL,
LPK.DLL,
USP10.dll, comctl32.dll, SynTPFcs.dll,
CLBCATQ.DLL, COMRes.dll, msctfime.ime,
ConnMngmntRes.dll, ConnFilter.dll,

mRouterController.dll, tbhook.dll, msi.dll,
SXS.DLL
ECTaskScheduler.exe 776 ntdll.dll, kernel32.dll, Wswitch.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, WINSPOOL.DRV, msvcrt.dll,
comdlg32.dll, SHLWAPI.dll, COMCTL32.dll,
SHELL32.dll, ole32.dll, VERSION.dll,
oledlg.dll, OLEAUT32.dll, CracDlr.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
comctl32.dll,
SynTPFcs.dll, CLBCATQ.DLL, COMRes.dll,
msi.dll, SXS.DLL, ECTaskSchedulerRes.dll,
UNIFYT~1.DLL, ECTriggerResources.DLL,
tbhook.dll, ectui.dll, ECENGI~1.DLL,
OLEPRO32.DLL, rtsock.dll, CONNEC~1.DLL,
msctfime.ime, TIMETR~1.DLL, SCRFSProxy.dll
WZQKPICK.EXE 952 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, USER32.dll, GDI32.dll,
SHELL32.dll, msvcrt.dll, SHLWAPI.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
comctl32.dll,
SynTPFcs.dll, VERSION.dll, msctfime.ime,
ole32.dll, UxTheme.dll, Msimtf.dll,
MSCTF.dll, tbhook.dll
Elogerr.exe 2412 ntdll.dll, kernel32.dll, Wswitch.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, WINSPOOL.DRV, msvcrt.dll,
comdlg32.dll, SHLWAPI.dll, COMCTL32.dll,
SHELL32.dll, ole32.dll, VERSION.dll,
oledlg.dll, OLEPRO32.DLL, OLEAUT32.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
comctl32.dll,
SynTPFcs.dll, msctfime.ime, ELGERRRS.DLL,
CLBCATQ.DLL, COMRes.dll, tbhook.dll,
msi.dll, SXS.DLL, ECTaskSchedulerRes.dll,
ECENGRES.DLL, SCRFS.exe
mRouterRuntime.exe 2588 ntdll.dll, kernel32.dll, WSOCK32.dll,
WS2_32.dll, msvcrt.dll, WS2HELP.dll,
ADVAPI32.dll, RPCRT4.dll,
mRouterGateway.DLL, USER32.dll, GDI32.dll,
comdlg32.dll, SHLWAPI.dll, COMCTL32.dll,
SHELL32.dll, WINSPOOL.DRV, ole32.dll,
OLEAUT32.dll, mRouterPropPages.DLL,
oledlg.dll, OLEPRO32.DLL, IMM32.DLL,
LPK.DLL, USP10.dll, comctl32.dll,
SynTPFcs.dll, VERSION.dll, CLBCATQ.DLL,
COMRes.dll, msctfime.ime,
mRouterController.dll, MROUTERTCP.DLL,
MROUTERSERIAL.DLL, MROUTERIRSOCKETS.DLL,
mRouterBluetooth.dll, MROUTERWINSOCK.DLL,
mswsock.dll, wshirda.dll, tbhook.dll,
wtsapi32.dll, WINSTA.dll,
mRouterAccessPoint.dll, wshtcpip.dll,
msi.dll, SXS.DLL
BROADC~1.EXE 3236 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
ole32.dll, OLEAUT32.dll, MSVCRT.DLL,
IMM32.DLL, LPK.DLL, USP10.dll,
SynTPFcs.dll,
VERSION.dll, CLBCATQ.DLL, COMRes.dll,
tbhook.dll, msctfime.ime, msi.dll,
ECENGI~1.DLL, Wswitch.dll, WINSPOOL.DRV,
comdlg32.dll, SHLWAPI.dll, COMCTL32.dll,
SHELL32.dll, oledlg.dll, OLEPRO32.DLL,
CracDlr.dll, comctl32.dll, SXS.DLL,
rtsock.dll, SCRFSProxy.dll
SCRFS.exe 3420 ntdll.dll, kernel32.dll, Wswitch.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, WINSPOOL.DRV, msvcrt.dll,
comdlg32.dll, SHLWAPI.dll, COMCTL32.dll,
SHELL32.dll, ole32.dll, VERSION.dll,
oledlg.dll, CracDlr.dll, OLEAUT32.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
comctl32.dll,
SynTPFcs.dll, CLBCATQ.DLL, COMRes.dll,
msi.dll, SXS.DLL, tbhook.dll,
SCRFSProxy.dll, rtsock.dll, msctfime.ime
cmd.exe 2324 ntdll.dll, kernel32.dll, msvcrt.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, IMM32.DLL, LPK.DLL, USP10.dll
wmiprvse.exe 2660 ntdll.dll, kernel32.dll, msvcrt.dll,
ADVAPI32.dll, RPCRT4.dll, USER32.dll,
GDI32.dll, FastProx.dll, wbemcomn.dll,
OLEAUT32.dll, OLE32.DLL, NCObjAPI.DLL,
IMM32.DLL, LPK.DLL, USP10.dll, CLBCATQ.DLL,
COMRes.dll, VERSION.dll, wbemprox.dll,
wbemsvc.dll, wmiutils.dll, cimwin32.dll,
framedyn.dll, Secur32.dll, SETUPAPI.dll,
WTSAPI32.dll, WINSTA.dll, CFGMGR32.DLL,
WMI.DLL, NETAPI32.DLL
notepad.exe 2960 ntdll.dll, kernel32.dll, comdlg32.dll,
SHLWAPI.dll, msvcrt.dll, GDI32.dll,
USER32.dll, ADVAPI32.dll, RPCRT4.dll,
COMCTL32.dll, SHELL32.dll, WINSPOOL.DRV,
IMM32.DLL, LPK.DLL, USP10.dll,
SynTPFcs.dll,
VERSION.dll, msctfime.ime, ole32.dll,
UxTheme.dll, Msimtf.dll, MSCTF.dll,
tbhook.dll
msmsgs.exe 3108 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, GDI32.dll, USER32.dll,
ole32.dll, OLEAUT32.dll, MSVCRT.DLL,
COMCTL32.dll, SHLWAPI.dll, SHELL32.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
SynTPFcs.dll,
VERSION.dll, MSGSLANG.DLL, CLBCATQ.DLL,
COMRes.dll, msctfime.ime, SXS.DLL,
wtsapi32.dll, WINSTA.dll, es.dll,
WS2_32.dll, WS2HELP.dll, tbhook.dll,
msi.dll, rtcimsp.dll, WSOCK32.dll,
rtcdll.dll, ATL.DLL, Secur32.dll,
WININET.dll, CRYPT32.dll, MSASN1.dll,
WINMM.dll, iphlpapi.dll, DNSAPI.dll,
SYNCOR11.DLL, termmgr.dll, rtutils.dll,
quartz.dll, mswsock.dll, wshtcpip.dll,
dxmrtp.dll, MSVFW32.dll, DSOUND.dll,
PSAPI.DLL, devenum.dll, setupapi.dll,
wdmaud.drv, msacm32.drv, MSACM32.dll,
midimap.dll, msdmo.dll, dpnhupnp.dll,
rasapi32.dll, rasman.dll, NETAPI32.dll,
TAPI32.dll, rsaenh.dll, hnetcfg.dll,
netshell.dll, credui.dll, DHCPCSVC.DLL,
wbemprox.dll, wbemcomn.dll, wbemsvc.dll,
fastprox.dll, ACTXPRXY.DLL, USERENV.dll
tasklist.exe 3296 ntdll.dll, kernel32.dll, msvcrt.dll,
ADVAPI32.dll, RPCRT4.dll, USER32.dll,
GDI32.dll, MPR.dll, ole32.dll,
OLEAUT32.dll,
Secur32.dll, WS2_32.dll, WS2HELP.dll,
framedyn.dll, NETAPI32.dll, DBGHELP.dll,
VERSION.dll, IMM32.DLL, LPK.DLL, USP10.dll,
SynTPFcs.dll, CLBCATQ.DLL, COMRes.dll,
wbemprox.dll, wbemcomn.dll, Winsta.dll,
wbemsvc.dll, fastprox.dll


"Ramesh [MVP]" > wrote in message
...
JSI Tip 4555. Windows XP Autoenrollment cannot reach an Active Directory
domain controller?:
http://www.jsiinc.com/SUBJ/tip4500/rh4555.htm

--
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

"Chris Cox" > wrote in message
...
Like I said, I was running some stuff ;-)

I've had a look at the Event Viewer, and the following error happens every
boot:

"Automatic certificate enrollment for local system failed to contact the
active directory (0x8007054b). The specified domain either does not exist or
could not be contacted.
Enrollment will not be performed."

No other warnings or errors.

"Ramesh [MVP]" > wrote in message
...
That's a huge log :)

BTW, did you also check Event Viewer for failed services or warning entries?
Another option, perform a clean boot.

--
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

"Chris Cox" > wrote in message
...
TaskList log as requested. Note that I was running some applications at the
time (IE, HomeSite, Putty etc):
Ramesh [MVP]
June 23rd 04, 08:42 AM
>>Haven't seen the "Switch to"/"Retry" error since my crash this morning

That's good. I have saved the log in my system, just in case.

--=20
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

"Chris Cox" > wrote in message =
...
OK, Regmon generated a 14Mb logfile so I won't be posting that! Hehe.
Haven't seen the "Switch to"/"Retry" error since my crash this morning.

Here's the fresher TaskList:
Chris Cox
June 23rd 04, 08:42 AM
"Ramesh [MVP]" > wrote in message
...
>>Haven't seen the "Switch to"/"Retry" error since my crash this morning

>That's good. I have saved the log in my system, just in case.

Thanks for all your help Ramesh, it's really appreciated!
Google