Archived from groups: microsoft.public.windowsxp.basics (
More info?)
Hello Again
I just rebooted and the problem came right back, checked for the AV recycle
bin protection it is still disable on all 4 drives but the problem is back. I
think my computer is a bit slower as well as a result.
I did install cakewalk after the problem seemed to have gone and that is why
I rebooted. but here we are again.
Thanks for any help Walter
Wiredkaveman (kovadis)
"Kovadis" wrote:
> Hello Walter
>
> Thanks for your help, I looks as if the problem is gone. WHen you said to
> desable the AV recycle bin protection in Norton. I did but it didn't seem to
> work until now; I checked it again and I saw that it was only disabled on
> only one of my 4 HDD. When I disabled it just now on all 4 drives the problem
> seems to have gone. I had to disable it for each drive seperatly. I think it
> is working fine now.
> THanks again and if this turns out to be not the cause I will update it it
> here.
>
> THanks a million for the help.
>
> Wiredkaveman
>
>
> "Kovadis" wrote:
>
> > Hello Walter
> >
> > Here are the results of "silent Runner" like you asked.
> > I also discovered that I can delete folder if I just go to them "left click
> > and just press the delete button. Sometimes "RARELY" I can actually right
> > click on a folder and get the menu that way but the it goes back to the same
> > error.
> >
> > THanks for the HElp
> >
> > Wiredkaveman (Kovadis)
> >
> >
> >
> >
> > "Silent Runners.vbs", revision 22
> > Operating System: Windows XP
> >
> >
> > Startup items buried in registry:
> > ---------------------------------
> >
> > HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
> > "Yahoo! Pager" = "C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet"
> > ["Yahoo! Inc."]
> > "ctfmon.exe" = "C:\windows\System32\ctfmon.exe" [MS]
> >
> > HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
> > "QuickTime Task" = ""C:\Program Files\QuickTime\qttask.exe" -atboottime"
> > ["Apple Computer, Inc."]
> > "iTunesHelper" = "C:\Program Files\iTunes\iTunesHelper.exe" ["Apple
> > Computer, Inc."]
> > "MsmqIntCert" = "regsvr32 /s mqrt.dll" [file not found]
> > "NvCplDaemon" = "RUNDLL32.EXE C:\windows\System32\NvCpl.dll,NvStartup" [MS]
> > "UpdReg" = "C:\windows\UpdReg.EXE" ["Creative Technology Ltd."]
> > "Jet Detection" = ""C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe""
> > [empty data]
> > "ccApp" = ""C:\Program Files\Common Files\Symantec Shared\ccApp.exe""
> > ["Symantec Corporation"]
> > "Advanced Tools Check" = "C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE"
> > ["Symantec Corporation"]
> >
> > HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\
> > "InstallShieldSetup" = "C:\PROGRA~1\INSTAL~1\{A7315~1\setup.exe
> > -rebootC:\PROGRA~1\INSTAL~1\{A7315~1\reboot.ini -l0x9" [file not found]
> > "InstallShieldSetup1" = "C:\PROGRA~1\INSTAL~1\{3FCAA~1\Setup.exe
> > -rebootC:\PROGRA~1\INSTAL~1\{3FCAA~1\reboot.ini -l0x9" [file not found]
> >
> > HKLM\Software\Microsoft\Active Setup\Installed Components\
> > ">{22d6f312-b0f6-11d0-94ab-0080c74c7e95}\(Default)" = "Windows Media Player"
> > \StubPath =
> > "C:\WINDOWS\INF\unregmp2.exe /ShowWMP" [MS]
> >
> > HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
> > Objects\
> > {02478D38-C3F9-4efb-9B51-7695ECA05670}\(Default) = "Yahoo! Companion BHO"
> > -> resolves to: {CLSID}\InprocServer32\(Default) =
> > "C:\PROGRA~1\YAHOO!\COMPAN~1\INSTALLS\cpn\ycomp5_3_12_0.dll" ["Yahoo! Inc."]
> > {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = "AcroIEHlprObj Class"
> > -> resolves to: {CLSID}\InprocServer32\(Default) = "C:\Program
> > Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx" [empty data]
> > {BDF3E430-B101-42AD-A544-FADC6B084872}\(Default) = "NAV Helper"
> > -> resolves to: {CLSID}\InprocServer32\(Default) = "C:\Program
> > Files\Norton AntiVirus\NavShExt.dll" ["Symantec Corporation"]
> >
> > HKLM\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\
> > "PostBootReminder" = "{7849596a-48ea-486e-8937-a2a3009f31a9}"
> > -> resolves to: {CLSID}\InprocServer32\(Default) =
> > "C:\windows\system32\SHELL32.dll" [MS]
> > "CDBurn" = "{fbeb8a05-beee-4442-804e-409d6c4515e9}"
> > -> resolves to: {CLSID}\InprocServer32\(Default) =
> > "C:\windows\system32\SHELL32.dll" [MS]
> > "WebCheck" = "{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
> > -> resolves to: {CLSID}\InprocServer32\(Default) =
> > "C:\windows\System32\webcheck.dll" [MS]
> > "SysTray" = "{35CEC8A3-2BE6-11D2-8773-92E220524153}"
> > -> resolves to: {CLSID}\InprocServer32\(Default) =
> > "C:\WINDOWS\System32\stobject.dll" [MS]
> >
> > HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\
> > INFECTION WARNING! "PCANotify\DLLName" = "PCANotify.dll" ["Symantec
> > Corporation"]
> >
> >
> > Startup items in "kovadis" & "All Users" startup folders:
> > ---------------------------------------------------------
> >
> > C:\Documents and Settings\All Users\Start Menu\Programs\Startup
> > "InterVideo WinScheduler" -> shortcut to: "C:\program
> > files\InterVideo\WinDVD4PR\WinScheduler.exe" ["InterVideo Inc."]
> > "InterVideo WinCinema Manager" -> shortcut to: "C:\program
> > files\InterVideo\Common\Bin\WinCinemaMgr.exe" [empty data]
> > "Adobe Gamma Loader" -> shortcut to: "C:\program files\common
> > files\Adobe\Calibration\Adobe Gamma Loader.exe" ["Adobe Systems, Inc."]
> >
> >
> > Enabled Scheduled Tasks
> > -----------------------
> >
> > "EastTecEraser" -> launches: "C:\PROGRA~1\EAST-T~1\eraser.exe /G /B /S"
> > [file not found]
> > "Symantec NetDetect" -> launches: "C:\Program
> > Files\Symantec\LiveUpdate\NDETECT.EXE" ["Symantec Corporation"]
> > "Norton AntiVirus - Scan my computer - kovadis" -> launches:
> > "C:\PROGRA~1\NORTON~1\Navw32.exe /task:"C:\Documents and Settings\All
> > Users\Application Data\Symantec\Norton AntiVirus\Tasks\mycomp.sca""
> > ["Symantec Corporation"]
> >
> >
> > Running Services (Display Name, Service Name, Path {Service DLL})
> > -----------------------------------------------------------------
> >
> > Application Layer Gateway Service, ALG, "C:\windows\System32\alg.exe" [MS]
> > Automatic Updates, wuauserv, "C:\windows\system32\svchost.exe -k netsvcs"
> > {"C:\WINDOWS\System32\wuauserv.dll" [MS]}
> > Background Intelligent Transfer Service, BITS,
> > "C:\windows\System32\svchost.exe -k netsvcs" {"C:\windows\System32\qmgr.dll"
> > [MS]}
> > COM+ Event System, EventSystem, "C:\WINDOWS\System32\svchost.exe -k netsvcs"
> > {"C:\WINDOWS\System32\es.dll" [MS]}
> > Computer Browser, Browser, "C:\windows\System32\svchost.exe -k netsvcs"
> > {"C:\windows\System32\browser.dll" [MS]}
> > Cryptographic Services, CryptSvc, "C:\windows\system32\svchost.exe -k
> > netsvcs" {"C:\windows\System32\cryptsvc.dll" [MS]}
> > DHCP Client, Dhcp, "C:\windows\System32\svchost.exe -k netsvcs"
> > {"C:\windows\System32\dhcpcsvc.dll" [MS]}
> > Distributed Link Tracking Client, TrkWks, "C:\windows\system32\svchost.exe
> > -k netsvcs" {"C:\windows\system32\trkwks.dll" [MS]}
> > Distributed Transaction Coordinator, MSDTC, "C:\WINDOWS\System32\msdtc.exe"
> > [MS]
> > DNS Client, Dnscache, "C:\windows\System32\svchost.exe -k NetworkService"
> > {"C:\windows\System32\dnsrslvr.dll" [MS]}
> > Error Reporting Service, ERSvc, "C:\windows\System32\svchost.exe -k netsvcs"
> > {"C:\windows\System32\ersvc.dll" [MS]}
> > Event Log, Eventlog, "C:\windows\system32\services.exe" [MS]
> > Fast User Switching Compatibility, FastUserSwitchingCompatibility,
> > "C:\windows\System32\svchost.exe -k netsvcs"
> > {"C:\windows\System32\shsvcs.dll" [MS]}
> > Help and Support, helpsvc, "C:\windows\System32\svchost.exe -k netsvcs"
> > {"C:\windows\PCHealth\HelpCtr\Binaries\pchsvc.dll" [MS]}
> > HID Input Service, HidServ, "C:\windows\System32\svchost.exe -k netsvcs"
> > {"C:\windows\System32\hidserv.dll" [MS]}
> > IIS Admin, IISADMIN, "C:\WINDOWS\System32\inetsrv\inetinfo.exe" [MS]
> > Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS),
> > SharedAccess, "C:\windows\System32\svchost.exe -k netsvcs"
> > {"C:\windows\System32\ipnathlp.dll" [MS]}
> > iPod Service, iPodService, "C:\Program Files\iPod\bin\iPodService.exe"
> > ["Apple Computer, Inc."]
> > IPSEC Services, PolicyAgent, "C:\windows\System32\lsass.exe" [MS]
> > Logical Disk Manager, dmserver, "C:\windows\System32\svchost.exe -k netsvcs"
> > {"C:\windows\System32\dmserver.dll" ["Microsoft Corp."]}
> > Machine Debug Manager, MDM, ""C:\Program Files\Common Files\Microsoft
> > Shared\VS7Debug\mdm.exe"" [MS]
> > Message Queuing, MSMQ, "C:\WINDOWS\System32\mqsvc.exe" [MS]
> > Message Queuing Triggers, MSMQTriggers, "C:\WINDOWS\System32\mqtgsvc.exe" [MS]
> > Network Connections, Netman, "C:\windows\System32\svchost.exe -k netsvcs"
> > {"C:\windows\System32\netman.dll" [MS]}
> > Network Location Awareness (NLA), Nla, "C:\windows\System32\svchost.exe -k
> > netsvcs" {"C:\windows\System32\mswsock.dll" [MS]}
> > Norton Unerase Protection, NProtectService, "C:\Program Files\Norton
> > AntiVirus\AdvTools\NPROTECT.EXE" ["Symantec Corporation"]
> > NT LM Security Support Provider, NtLmSsp, "C:\windows\System32\lsass.exe" [MS]
> > NVIDIA Display Driver Service, NVSvc, "C:\windows\System32\nvsvc32.exe"
> > ["NVIDIA Corporation"]
> > Plug and Play, PlugPlay, "C:\windows\system32\services.exe" [MS]
> > Portable Media Serial Number, WmdmPmSp, "C:\windows\System32\svchost.exe -k
> > netsvcs" {"C:\WINDOWS\System32\mspmspsv.dll" [MS]}
> > Print Spooler, Spooler, "C:\windows\system32\spoolsv.exe" [MS]
> > Remote Access Connection Manager, RasMan, "C:\windows\System32\svchost.exe
> > -k netsvcs" {"C:\windows\System32\rasmans.dll" [MS]}
> > Remote Procedure Call (RPC), RpcSs, "C:\windows\system32\svchost -k rpcss"
> > {"C:\windows\system32\rpcss.dll" [MS]}
> > Remote Registry, RemoteRegistry, "C:\windows\system32\svchost.exe -k
> > LocalService" {"C:\windows\system32\regsvc.dll" [MS]}
> > SAVScan, SAVScan, "C:\Program Files\Norton AntiVirus\SAVScan.exe" ["Symantec
> > Corporation"]
> > Secondary Logon, seclogon, "C:\windows\System32\svchost.exe -k netsvcs"
> > {"C:\windows\System32\seclogon.dll" [MS]}
> > Security Accounts Manager, SamSs, "C:\windows\system32\lsass.exe" [MS]
> > Server, lanmanserver, "C:\windows\System32\svchost.exe -k netsvcs"
> > {"C:\windows\System32\srvsvc.dll" [MS]}
> > Shell Hardware Detection, ShellHWDetection, "C:\windows\System32\svchost.exe
> > -k netsvcs" {"C:\windows\System32\shsvcs.dll" [MS]}
> > Simple Mail Transfer Protocol (SMTP), SMTPSVC,
> > "C:\WINDOWS\System32\inetsrv\inetinfo.exe" [MS]
> > SNMP Service, SNMP, "C:\windows\System32\snmp.exe" [MS]
> > SSDP Discovery Service, SSDPSRV, "C:\windows\System32\svchost.exe -k
> > LocalService" {"C:\windows\System32\ssdpsrv.dll" [MS]}
> > Symantec Core LC, Symantec Core LC, "C:\Program Files\Common Files\Symantec
> > Shared\CCPD-LC\symlcsvc.exe" ["Symantec Corporation"]
> > Symantec Event Manager, ccEvtMgr, ""C:\Program Files\Common Files\Symantec
> > Shared\ccEvtMgr.exe"" ["Symantec Corporation"]
> > Symantec Settings Manager, ccSetMgr, ""C:\Program Files\Common
> > Files\Symantec Shared\ccSetMgr.exe"" ["Symantec Corporation"]
> > System Event Notification, SENS, "C:\windows\system32\svchost.exe -k
> > netsvcs" {"C:\windows\system32\sens.dll" [MS]}
> > System Restore Service, srservice, "C:\windows\System32\svchost.exe -k
> > netsvcs" {"C:\WINDOWS\System32\srsvc.dll" [MS]}
> > Task Scheduler, Schedule, "C:\windows\System32\svchost.exe -k netsvcs"
> > {"C:\windows\system32\schedsvc.dll" [MS]}
> > TCP/IP NetBIOS Helper, LmHosts, "C:\windows\System32\svchost.exe -k
> > LocalService" {"C:\windows\System32\lmhsvc.dll" [MS]}
> > Telephony, TapiSrv, "C:\windows\System32\svchost.exe -k netsvcs"
> > {"C:\windows\System32\tapisrv.dll" [MS]}
> > Terminal Services, TermService, "C:\windows\System32\svchost.exe -k netsvcs"
> > {"C:\windows\System32\termsrv.dll" [MS]}
> > Themes, Themes, "C:\windows\System32\svchost.exe -k netsvcs"
> > {"C:\windows\System32\shsvcs.dll" [MS]}
> > Upload Manager, uploadmgr, "C:\windows\System32\svchost.exe -k netsvcs"
> > {"C:\windows\PCHealth\HelpCtr\Binaries\pchsvc.dll" [MS]}
> > WebClient, WebClient, "C:\windows\System32\svchost.exe -k LocalService"
> > {"C:\windows\System32\webclnt.dll" [MS]}
> > Windows Audio, AudioSrv, "C:\windows\System32\svchost.exe -k netsvcs"
> > {"C:\windows\System32\audiosrv.dll" [MS]}
> > Windows Image Acquisition (WIA), stisvc, "C:\windows\System32\svchost.exe -k
> > imgsvc" {"C:\windows\system32\wiaservc.dll" [MS]}
> > Windows Management Instrumentation, winmgmt,
> > "C:\windows\system32\svchost.exe -k netsvcs"
> > {"C:\windows\system32\wbem\WMIsvc.dll" [MS]}
> > Windows Time, W32Time, "C:\windows\System32\svchost.exe -k netsvcs"
> > {"C:\WINDOWS\System32\w32time.dll" [MS]}
> > Wireless Zero Configuration, WZCSVC, "C:\windows\System32\svchost.exe -k
> > netsvcs" {"C:\windows\System32\wzcsvc.dll" [MS]}
> > Workstation, lanmanworkstation, "C:\windows\System32\svchost.exe -k netsvcs"
> > {"C:\windows\System32\wkssvc.dll" [MS]}
> > World Wide Web Publishing, W3SVC, "C:\windows\System32\inetsrv\inetinfo.exe"
> > [MS]
> > Norton AntiVirus Auto Protect Service, navapsvc, ""C:\Program Files\Norton
> > AntiVirus\navapsvc.exe"" ["Symantec Corporation"]
> >
> >
> >
> > "Walter Clayton" wrote:
> >
> > > Go to http://www.silentrunners.org/ and download "silent runners.vbs"
> > > Three things from a diagnostic stand point. It looks like something is
> > > hooking the shell although there is nothing obvious I can find at present.
> > >
> > > Run "silent runners" and copy and paste the results back here. That will
> > > tell me what you have running outside the normal MS supplied startup stuff.
> > >
> > > You can also try the delete in safe mode to see what happens as well as
> > > doing the delete via command line 'rmdir /s [path]'. You can use 'rmdir /?'
> > > for an explanation.
> > >
> > > --
> > > Walter Clayton - MS MVP(WinXP)
> > > Associate Expert
> > >
http://www.microsoft.com/windowsxp/expertzone
> > > Any technology distinguishable from magic is insufficiently advanced.
> > >
http://www.dts-l.org
> > > http://support.microsoft.com/servicedesks/fileversion/default.asp|
> > >
> > >
> > > "Kovadis" <Kovadis@discussions.microsoft.com> wrote in message
> > > news:5C55A8B1-1BAD-415A-BC0F-D2B36B7C6804@microsoft.com...
> > > > Hello
> > > >
> > > > I have the same problem; I tried everything that Walter suggested and no
> > > > results.
> > > > I connot "Right click" on any of the folders on my drives because I get
> > > > that
> > > > same error message.
> > > >
> > > > HELP PLEASE.
> > > >
> > > > Kovadis
> > > >
> > > > "Walter Clayton" wrote:
> > > >
> > > >> Then try doing shift-delete to bypass the recycle bin.
> > > >>
> > > >> Something also just occured to me. If you have Norton protected recycle
> > > >> bin
> > > >> installed disable it as well.
> > > >>
> > > >> --
> > > >> Walter Clayton - MS MVP(WinXP)
> > > >> Associate Expert
> > > >>
http://www.microsoft.com/windowsxp/expertzone
> > > >> Any technology distinguishable from magic is insufficiently advanced.
> > > >>
http://www.dts-l.org
> > > >> http://support.microsoft.com/servicedesks/fileversion/default.asp|
> > > >>
> > > >>
> > > >> "Smooth G" <SmoothG@infoworks.com> wrote in message
> > > >> news:32cjh0lf91a45e72ul1rgj7j7limagj0rn@4ax.com...
> > > >> > On Tue, 10 Aug 2004 18:20:20 -0400, "Walter Clayton"
> > > >> > <w-claytonNO@SPmvpsAM.org> wrote:
> > > >> >
> > > >> >>Try with NAV disabled to see what happens. If you're running Liveupdate
> > > >> >>the
> > > >> >>executable part of NAV is being updated as well. The NAV you're running
> > > >> >>today isn't necessarily what came of the box.
> > > >> >
> > > >> > OK I will give it a shot!
> > > >> > What if that doesn't help?
> > > >> >
> > > >>
> > > >>
> > >
> > >
Facebook
Twitter
Instagram