DaniWeb IT Discussion Community

DaniWeb IT Discussion Community (http://www.daniweb.com/forums/index.php)
-   Viruses, Spyware and other Nasties (http://www.daniweb.com/forums/forum64.html)
-   -   program crashes immediately when opening - HJT log included... (http://www.daniweb.com/forums/thread167769.html)

kilegoty Jan 11th, 2009 8:01 pm
program crashes immediately when opening - HJT log included...
 
hello there,
all of the sudden completely out of the blue this program that i use to make music with just closes before it can even fully open. it looks like some other window is popping up behind it (it looked like a regular window box with a completely white background) and before the program can even get up and running it shuts down. it doesn't leave any sign of it in the task manager or anything like that - i have tried uninstalling it and reinstalling it and the repair option that comes with the installer and nothing seems to work. this happened just out of the blue one day when i was getting ready to jam with my band and now it won't work!
this program is essential to my live music and to my band so any help would be greatly appreciated - here is a fresh hijackthis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:07:24 PM, on 1/11/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Kaspersky Lab\Kaspersky Security Suite CBE\avp.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\M-Audio Uno\UnoInst.exe
C:\WINDOWS\System32\vssvc.exe
C:\WINDOWS\System32\dmadmin.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Creative\Mixer\CTSVolFE.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Security Suite CBE\avp.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32\dllhost.exe
C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Tyler\My Documents\utorrent.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Tyler\My Documents\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/dell?hl=en&...us&ibd=2061210
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.myspace.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = http://www.google.com/ig/dell?hl=en&...us&ibd=2061210
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [CTSVolFE.exe] "C:\Program Files\Creative\Mixer\CTSVolFE.exe" /r
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Security Suite CBE\avp.exe"
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Security Suite CBE\ie_banner_deny.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Statistik für Web-Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Security Suite CBE\SCIEPlgn.dll
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll
O23 - Service: Kaspersky Security Suite CBE (avp) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Security Suite CBE\avp.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Uno Installer (UnoInstallerService) - Unknown owner - C:\Program Files\M-Audio Uno\UnoInst.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
O23 - Service: Windows Security Alert (WSAsvc) - Unknown owner - C:\WINDOWS\system32\wsasvc.exe (file missing)

--
End of file - 5335 bytes

thanks again,
kilegoTy

jholland1964 Jan 12th, 2009 12:20 am
Re: program crashes immediately when opening - HJT log included...
 
What is the exact name and version of the program that you are having problems with?
I would suggest that you begin by following steps 2, 7, 8 and 9 (though in this step please allow the ESET scanner to remove whatever is found) Please REBOOT after both the MBA-M scan and then the ESET scan. Be sure to save both logs.
Once you have completed the scans and removed what they found then run a new HJT scan and post back with the logs.
Judy

kilegoty Jan 12th, 2009 1:08 am
Re: program crashes immediately when opening - HJT log included...
 
hmmm
where are these "steps" coming from that you're mentioning...?

jholland1964 Jan 12th, 2009 11:29 am
Re: program crashes immediately when opening - HJT log included...
 
Quote:
Originally Posted by kilegoty (Post 776262)
hmmm
where are these "steps" coming from that you're mentioning...?
:$ Sorry, forgot to give you the link;
http://www.daniweb.com/forums/thread134865.html

Now what is the exact name and version of the program you are having problems with?

kilegoty Jan 12th, 2009 6:54 pm
Re: program crashes immediately when opening - HJT log included...
 
i have scanned my computer with kaspersky and eset wanted to install something so i opted not to use their scanner but kaspersky is always up to date and it found nothing
there is that weird thing at the bottom of the hijackthis log that wont go away when i try and get rid of it that has the "(file missing)" next to it
also
i recently noticed something popping up on my desktop after i run certain programs that is a .txt file called "memreport"
i have no idea what it does and it usually doesnt even have anything written in it??
very strange
thanks for your help too!
i hope something changes because i use my computer to make music with and its my life really
thanksssss
kilegoty

jholland1964 Jan 12th, 2009 7:12 pm
Re: program crashes immediately when opening - HJT log included...
 
Quote:
Originally Posted by kilegoty (Post 776808)
i have scanned my computer with kaspersky and eset wanted to install something so i opted not to use their scanner but kaspersky is always up to date and it found nothing
there is that weird thing at the bottom of the hijackthis log that wont go away when i try and get rid of it that has the "(file missing)" next to it
also
i recently noticed something popping up on my desktop after i run certain programs that is a .txt file called "memreport"
i have no idea what it does and it usually doesnt even have anything written in it??
very strange
thanks for your help too!
i hope something changes because i use my computer to make music with and its my life really
thanksssss
kilegoty
We ask that you run ESET Scanner because it does have the capability to fix whatever is found. It does require the use of and active X download. Kaspersky, while very good, no longer offers the option to fix.
the file you see appear on the desktop, while a lot of info is not found about it, does appear to be malware related.
I have repeatedly asked for the name of the program and it's version that you are having difficulties with but you have declined to be forthcoming on this.
We have certain steps we ask people to do, one of which is provide ALL information requested and the second is to follow all the steps we request and post the logs. You have completed none of those requests. I don't see how I can offer anymore help unless I get the answers to the questions I have asked AND have you complete the steps requested.

The O23 entry in the HJT log you noted is a file which was started from Services, it can't start because the file is no longer there. But the "start order" is still there in services and in order to get this to stop appearing in your HJT log you will have to disable that using Services and change it's start up from Automatic to Disabled.

kilegoty Jan 12th, 2009 10:20 pm
Re: program crashes immediately when opening - HJT log included...
 
I'm sorry for the frustrations - I suppose the computer was passing it on to me...

anyhow - here is the Malwarebytes log which was very suprising by the way:

Malwarebytes' Anti-Malware 1.32
Database version: 1647
Windows 5.1.2600 Service Pack 2

1/12/2009 8:50:09 PM
mbam-log-2009-01-12 (20-50-09).txt

Scan type: Full Scan (C:\|D:\|E:\|)
Objects scanned: 116218
Time elapsed: 36 minute(s), 53 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 14
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\Interface\{1f63b171-e2f3-4362-a484-8563144d62e6} (Adware.WebDir) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{143414d1-c324-4d6f-9756-5075d9a4a485} (Adware.WebDir) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{dcd53738-c4f9-414a-a03c-c7405a4ac844} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{938a8a03-a938-4019-b764-03ff8d167d79} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{86c510e9-97ef-4749-914f-0280247be3a6} (Adware.WebDir) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{09f1adac-76d8-4d0f-99a5-5c907dadb988} (Rogue.Multiple) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{b64f4a7c-97c9-11da-8bde-f66bad1e3f3a} (Rogue.WinAntivirus) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{2d2bee6e-3c9a-4d58-b9ec-458edb28d0f6} (Rogue.DriveCleaner) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\aldd (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\MS Juan (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Juan (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\aoprndtws (Trojan.Vundo) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{dcd53738-c4f9-414a-a03c-c7405a4ac844} (Trojan.Vundo) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\WINDOWS\cookies.ini (Malware.Trace) -> Quarantined and deleted successfully.

- here are the results from the ESET scan:

# version=4
# OnlineScanner.ocx=1.0.0.635
# OnlineScannerDLLA.dll=1, 0, 0, 79
# OnlineScannerDLLW.dll=1, 0, 0, 78
# OnlineScannerUninstaller.exe=1, 0, 0, 49
# vers_standard_module=3760 (20090112)
# vers_arch_module=1.064 (20080214)
# vers_adv_heur_module=1.066 (20070917)
# EOSSerial=032e92d016ac7141bd994d8166ed0956
# end=finished
# remove_checked=false
# unwanted_checked=true
# utc_time=2009-01-13 02:25:10
# local_time=2009-01-12 09:25:10 (-0500, Eastern Standard Time)
# country="United States"
# osver=5.1.2600 NT Service Pack 2
# scanned=214381
# found=0
# scan_time=1748

- the Deckard scanner link is dead and when I attempted to find it online, all i saw was negative comments about it

- finally here is the uninstall list from HJT:

Adobe Flash Player ActiveX
Adobe Reader 7.0.8
AIM 6
Antares Tube v1.0
Applied Acoustics Lounge Lizard EP VSTi DXi v3.0
Art Vista Virtual Grand Piano
Arturia CS-80V v1.5
Arturia Minimoog V v1.0
Arturia Moog Modular V2 v1.0
Astralis Microtonal Synth Pack 1.1
Atmosphere
Atmosphere Deluxe v6.0
Broadcom Management Programs
Camel Audio Cameleon 5000 v1.7 VSTi
Cantabile 1.2 Lite
CCleaner (remove only)
Cisco Systems VPN Client 5.0.02.0090
Conexant HDA D110 MDC V.92 Modem
Cucusoft MPEG/MOV/RM/DivX/AVI to DVD/VCD/SVCD Creator Pro 7.07
Darbuka 1.0.0
Dell Driver Reset Tool
ESET Online Scanner
FLUID 1.01
GForce impOSCar v1.10 VSTi RTAS
High Definition Audio Driver Package - KB835221
HijackThis 2.0.2
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Player 10 (KB903157)
Hotfix for Windows XP (KB888795)
Hotfix for Windows XP (KB891593)
Hotfix for Windows XP (KB895961)
Hotfix for Windows XP (KB899337)
Hotfix for Windows XP (KB899510)
Hotfix for Windows XP (KB902841)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB952287)
Intel(R) Graphics Media Accelerator Driver
Intel(R) PROSet/Wireless Software
J2SE Runtime Environment 5.0 Update 6
Kaspersky Security Suite CBE
Kaspersky Security Suite CBE
K-Lite Mega Codec Pack 1.25
Latigo 1.0.0
Live 7.0.3
Malwarebytes' Anti-Malware
mCore
mDrWiFi
mHlpDell
microKORG SoundEditor
Microsoft .NET Framework 1.0 Hotfix (KB887998)
Microsoft .NET Framework 1.0 Hotfix (KB930494)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Professional Edition 2003
Microsoft Visual C++ 2005 Redistributable
Microtonal Patches 1.1
mIWA
Mixer
mLogView
mMHouse
Morphine
mPfMgr
mPfWiz
mProSafe
mSSO
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
M-Tron
mWlsSafe
mWMI
mXML
mZConfig
Native Instruments Absynth 4
Native Instruments Absynth v3.0.2
Native Instruments B4 II
Native Instruments Massive v1.0.1.008 VSTi DXi RTAS
Native Instruments Pro-53
Native Instruments Vokator
NomadFactory Blue Tubes Dynamics Pack VST RTAS v3.2
NomadFactory Blue Tubes Effects Pack VST RTAS v3.2
NomadFactory Blue Tubes Equalizers Pack VST RTAS v3.2
NomadFactory BlueVerb DRV-2080 VST RTAS v1.4
NomadFactory Essential Studio Suite VST RTAS v1.5
NomadFactory Liquid Bundle VST RTAS v2.4
NomadFactory Rock Amp Legends VST RTAS v1.5
Pianoteq v2.2.0
PSP 84 1.5.2
PSP VintageWarmer2 2.1.4
QuickSet
Reason 4.0
Rob Papen Albino 3
Roxio DLA
Roxio MyDVD LE
Roxio RecordNow Audio
Roxio RecordNow Copy
Roxio RecordNow Data
SCARBEE Vintage Keyboard FX
Security Update for Windows Internet Explorer 7 (KB928090)
Security Update for Windows Internet Explorer 7 (KB929969)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows Internet Explorer 7 (KB933566)
Security Update for Windows Internet Explorer 7 (KB937143)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921503)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB923694)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925454)
Security Update for Windows XP (KB925486)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Security Update for Windows XP (KB933729)
Security Update for Windows XP (KB935839)
Security Update for Windows XP (KB935840)
Security Update for Windows XP (KB936021)
Security Update for Windows XP (KB937894)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB938829)
Security Update for Windows XP (KB941202)
Security Update for Windows XP (KB941568)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB941644)
Security Update for Windows XP (KB941693)
Security Update for Windows XP (KB943055)
Security Update for Windows XP (KB943460)
Security Update for Windows XP (KB943485)
Security Update for Windows XP (KB944653)
Security Update for Windows XP (KB945553)
Security Update for Windows XP (KB946026)
Security Update for Windows XP (KB948590)
Security Update for Windows XP (KB948881)
Security Update for Windows XP (KB950749)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Sonic Activation Module
Sonic Encoders
Sonic Update Manager
Sound Blaster Audigy ADVANCED MB Demo
Synaptics Pointing Device Driver
Synful Orchestra v2.31
Uno
Update for Windows Media Player 10 (KB913800)
Update for Windows Media Player 10 (KB926251)
Update for Windows XP (KB894391)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB910437)
Update for Windows XP (KB911280)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB927891)
Update for Windows XP (KB929338)
Update for Windows XP (KB930916)
Update for Windows XP (KB931836)
Update for Windows XP (KB932823-v3)
Update for Windows XP (KB933360)
Update for Windows XP (KB936357)
Update for Windows XP (KB938828)
Update for Windows XP (KB942763)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB955839)
Update Rollup 2 for Windows XP Media Center Edition 2005
Windows Internet Explorer 7
Windows Media Format Runtime
Windows Media Player 10
Windows Media Player 10 Hotfix [See EmeraldQFE2 for more information]
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB890927
Windows XP Media Center Edition 2005 KB908246
WinRAR archiver

once again I apologize for the frustrations... hopefully these can answer some questions?
thanks!!
kilegoTy

kilegoty Jan 12th, 2009 10:49 pm
Re: program crashes immediately when opening - HJT log included...
 
whoops i almost forgot...
the program i am using that is crashing is called Native Instruments Massive Ver. 1.0.1.8

jholland1964 Jan 13th, 2009 12:53 am
Re: program crashes immediately when opening - HJT log included...
 
Thanks for the info. Don't worry about that Deckard Scanner, meant to tell you to ignore that one anyway, it hasn't been available for a long time. If you note in the list of instructions it will tell you to ignore that part of the instructions.
I notice you have several of the Native Instruments programs on the computer is the one you noted the only one which causes the computer to crash? Forgive me for asking what may sound like silly questions but I am not familiar with the program...is this a stand alone program, the Native Instruments Massive, or must it have the others to run properly? The reason I ask is maybe there is a problem with the entire "package" of Native Instruments programs that just the removal and reinstall of the one isn't enough. Do the other ones work ok? Were these installed via downloads or do you have an install disk for the programs?
Can you give me a new HJT scan run since the ESET and MBA-M scans were run? ESET didn't find anything but MBA-M certainly did.
Judy

kilegoty Jan 14th, 2009 11:55 am
Re: program crashes immediately when opening - HJT log included...
 
I have a couple other Native Instruments programs that run perfectly *crosses fingers* :icon_eek: This is the only one that has been giving me problems and it was so weird and straight out of the blue - I was up on stage opening up the program to start the one song we do and it was just crashing... I looked at the other guys in my band and said "wellllllp looks like we won't be playing that song" haha
I am on a work computer right now so I will send you a HJT log as soon as I get to my personal computer...
Also, an update on the situation - the program doesn't crash immediately now it is only crashing when I try to load certain presets for sounds that came with the version that was the source of the problem (I reinstalled an earlier version recently) - this is oooookay I suppose but the program still is not working to its full potential.
Thanks for your help and the HJT log will be coming your way!
kilegoTy
*EDIT*
I run the program in a stand-alone mode but it can be opened through a host program - when it first started happening and the stand-alone crashed I tried opening it through a host program meant for live music sequencing and it would just crash the entire program when I loaded the .dll file.

jholland1964 Jan 14th, 2009 1:19 pm
Re: program crashes immediately when opening - HJT log included...
 
Quote:
the program doesn't crash immediately now it is only crashing when I try to load certain presets for sounds that came with the version that was the source of the problem (I reinstalled an earlier version recently)
Ok, a bit of clarification; It was a NEWER version that did the immediate crashing? So you re-installed an earlier version and that works but the presets which came with the later version are now what does the crashing?
If I understood this correctly then my question is this, did you Uninstall that newer version BEFORE installing that older version? If this is the case then I feel the newer version was not totally uninstalled, if it had been the presets of the new version shouldn't still be there. Then it seems to me that the reason for this is these presets of the newer version probably crash because the older version does not contain the needed files to run those presets of the newer version, so it crashes.
Now since I am completely in the dark as far as "music creating" programs go let me just use a different program as an example, and hopefully I won't sound like an idiot:)
I am going to use as an example the Microsoft Office program because I assume that no matter what type of computer program you are using the basic rules are the same and I had a somewhat similar situation recently.
I have Microsoft Office 2000, fully updated as far as it would go..meaning several years. I was creating a booklet using Publisher which is part of the Office program, needed for a meeting I was chairing, with a lot of graphics and different fonts, etc. I created the booklet and sent it to my daughter who is a grapic designer to edit and add the art work. She could read it and work with it without difficulty using her Publisher 2007. She did the editing, added graphics, changed some fonts, etc and sent it back to me. I could not open what she sent to me using my Publisher program, because she used a newer version than I had used. She could read MY booklet because her newer version of Publisher contained EVERYTHING in my old version but my old version did not contain files which were in her newer version so I could not read her edits.
I think this is quite possibly the problem you are having.
The host program as you call it would be the same as my Office 2000, when you installed the newer version of your Native Instruments Massive then it would not run properly because the host program, I assume is Native Instruments, was older than the Native Instruments Massive. The Native Instruments host program probably is like the Office 2000, it contains at least parts of all the "add-on" programs so that those add-ons can run but your older version of Native Instruments does not contain some of those files needed to run your newer version of Native Instruments Massive.
Now I have to ask, this is a very expensive program from what I can find, is the a "legal" paid for program or did you obtain this via file sharing? If it is a legally paid for and licensed copy then I would suggest you go to their website for assistance on the program problems they do have a forum for posting and they do have a support section. If this is a program you obtained via P2P file sharing then you are probably out of luck. This is a risk you take when you use file sharing to obtain a legitimate program without paying for it. Many times what you receive will be missing key elements OR contains viruses, trojans and malware.

kilegoty Jan 21st, 2009 5:41 pm
Re: program crashes immediately when opening - HJT log included...
 
Wow... lots of information - I'm going to have to really look at what you're explaining here again haha

I actually have a friend who is a pretty well known music producer in my area and he loaned me the install disk plus a disc with some updates on it and what not for the newer versions... I definitely uninstalled the newer version to install the older version. I might try and get rid of the presets that i was using with the newer version and reload them and then see if it crashes still. Here is a fresh HJT log by the way and THANK YOU so much - that one malware bytes program suprised me a lot - I'd like to think that I'm pretty good at keeping my computer clean but it seems that I was wrong HAHA.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:47:08 PM, on 1/21/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Kaspersky Lab\Kaspersky Security Suite CBE\avp.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\M-Audio Uno\UnoInst.exe
C:\WINDOWS\System32\vssvc.exe
C:\WINDOWS\System32\dmadmin.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Creative\Mixer\CTSVolFE.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Security Suite CBE\avp.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\eHome\ehSched.exe
C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Tyler\My Documents\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/dell?hl=en&...us&ibd=2061210
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.myspace.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = http://www.google.com/ig/dell?hl=en&...us&ibd=2061210
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [CTSVolFE.exe] "C:\Program Files\Creative\Mixer\CTSVolFE.exe" /r
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Security Suite CBE\avp.exe"
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Security Suite CBE\ie_banner_deny.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Statistik für Web-Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Security Suite CBE\SCIEPlgn.dll
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll
O23 - Service: Kaspersky Security Suite CBE (avp) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Security Suite CBE\avp.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Uno Installer (UnoInstallerService) - Unknown owner - C:\Program Files\M-Audio Uno\UnoInst.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

--
End of file - 5343 bytes

Thanks again!
kilegoTy


All times are GMT -4. The time now is 3:58 am.

Forum system based on vBulletin Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
©2003 - 2009 DaniWeb® LLC