M
MasterDebater
I have a problem with which I need help.
When I restart my computer, the desktop and systray proceed to load normally
as they have always done, but then, just when it appears that all the
systray icons have all loaded normally and that the restart process should
be done, the desktop 'resets' - by reset I mean that everything (icons,
taskbar, etc.) disappears [except the desktop background picture] and then
appears to reload. The icons and taskbar reappear on the desktop and the
systray icons begin to refill.
BUT, here's the problem - not all of the systray reloads. In fact, only the
Norton Antivirus and the volume icons reappear on the taskbar. All other
systray icons fail to reappear. I don't see them - some of them, such as the
popup stopper 'stop-the-pop-up-lite,' which loaded before the reset MUST
still be there in the system running, since I see it running in task
manager/processes *and* I find it is necessary to hold down the control key
in order to open a second IE browser. Therefore, some or perhaps all of the
programs which where loaded during the initial systray loading are, in fact,
still running and/or working. Perhaps only the icons failed to reload into
the taskbar when the desktop 'reset' itself. I would like to determine why
its doing this and to be able to fix it.
The computer didn't do this until recently. The systray used to load fine
without any desktop reset. If anyone can tell me how to fix this, I would
greatly appreciate it.
My system: Win xp pro on eMachine T2625 with athlon xp 2600 2.12GHz and
1.0Gbytes RAM.
Here's what I have done:
0. disabled system backup
1. Ran Norton Antivirus
2. deleted system32.exe from system32 folder
3. removed 'c:\...system32.exe' from
hkey_local_machine\software\microsoft\windowsxt\current
version\winloggon\shell but left explorer.exe
4. removed any other mention of system32.exe from files, folders, and
registry
5. ran trend online virus scan
6. removed pup.exe, over.exe from program files
7. removed pup.exe from windows dir or system or system32 directory - cant
remember exactly
8. removed vicapa.exe from, I think, system directory
9. removed pup.exe from registry - don't remember where
10. ran coolwebsearch shredder - it shredded and then reported no further
problems
11. searched registry for 'systray' - found nothing suspicious
12. restarted machine and noted that desktop/systray reload/reset thing is
still occurring
I noted that registry key
'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceOb
jectDelayLoad\systray' is set to '{35CEC8A3-2BE6-11D2-8773-92E220524153}',
if that means anything relevant.
The problem is that Explorer.exe is restarting. Upon restarting the system,
I see the following
errors in the event logs:
Application logs:
winlogon, type:info, event id 1002, description: The shell stopped
unexpectedly, and Explorer.exe was restarted.
system errors:
remote access, event id 20071, description: point to point protocol module
c:\windows\system32\rastls.dll returned an error while initialing. The
request is not supported.
remote access, event id 20151, description: The Control Protocol EAP in the
Point to Point Protocol module c:\windows\system32\rasppp.dll returned an
error while initializing. The request is not supported.
RasMan, event id 20063, description: Remote Access Connection Manager failed
to start because the point to point protocol failed to initialize. The
request is not supported.
RasMan, event id 20035, description: Remote acces connection manager failed
to start because it could not create buffers. Restart the computer. Access
is denied.
RasMan, event id 20035 repeated
I believe I have a virus, and I'm resitant to update my Norton Antivirus so
as to kill it, since this would mean sending my credit card number over the
internet. Though I've sent my number before over the net, I havent done it
recently, and I'm a little worried that some virus is sort of hijacking
explorer.exe when it reloads at restart, somehow allowing someone remote
acces to my computer or my internet transmissions, thereby allowing them to
see my credit card number if I transmit it. I'm probably way off and being
paranoid, but computers can do that to you.
Any help is appreciated
When I restart my computer, the desktop and systray proceed to load normally
as they have always done, but then, just when it appears that all the
systray icons have all loaded normally and that the restart process should
be done, the desktop 'resets' - by reset I mean that everything (icons,
taskbar, etc.) disappears [except the desktop background picture] and then
appears to reload. The icons and taskbar reappear on the desktop and the
systray icons begin to refill.
BUT, here's the problem - not all of the systray reloads. In fact, only the
Norton Antivirus and the volume icons reappear on the taskbar. All other
systray icons fail to reappear. I don't see them - some of them, such as the
popup stopper 'stop-the-pop-up-lite,' which loaded before the reset MUST
still be there in the system running, since I see it running in task
manager/processes *and* I find it is necessary to hold down the control key
in order to open a second IE browser. Therefore, some or perhaps all of the
programs which where loaded during the initial systray loading are, in fact,
still running and/or working. Perhaps only the icons failed to reload into
the taskbar when the desktop 'reset' itself. I would like to determine why
its doing this and to be able to fix it.
The computer didn't do this until recently. The systray used to load fine
without any desktop reset. If anyone can tell me how to fix this, I would
greatly appreciate it.
My system: Win xp pro on eMachine T2625 with athlon xp 2600 2.12GHz and
1.0Gbytes RAM.
Here's what I have done:
0. disabled system backup
1. Ran Norton Antivirus
2. deleted system32.exe from system32 folder
3. removed 'c:\...system32.exe' from
hkey_local_machine\software\microsoft\windowsxt\current
version\winloggon\shell but left explorer.exe
4. removed any other mention of system32.exe from files, folders, and
registry
5. ran trend online virus scan
6. removed pup.exe, over.exe from program files
7. removed pup.exe from windows dir or system or system32 directory - cant
remember exactly
8. removed vicapa.exe from, I think, system directory
9. removed pup.exe from registry - don't remember where
10. ran coolwebsearch shredder - it shredded and then reported no further
problems
11. searched registry for 'systray' - found nothing suspicious
12. restarted machine and noted that desktop/systray reload/reset thing is
still occurring
I noted that registry key
'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceOb
jectDelayLoad\systray' is set to '{35CEC8A3-2BE6-11D2-8773-92E220524153}',
if that means anything relevant.
The problem is that Explorer.exe is restarting. Upon restarting the system,
I see the following
errors in the event logs:
Application logs:
winlogon, type:info, event id 1002, description: The shell stopped
unexpectedly, and Explorer.exe was restarted.
system errors:
remote access, event id 20071, description: point to point protocol module
c:\windows\system32\rastls.dll returned an error while initialing. The
request is not supported.
remote access, event id 20151, description: The Control Protocol EAP in the
Point to Point Protocol module c:\windows\system32\rasppp.dll returned an
error while initializing. The request is not supported.
RasMan, event id 20063, description: Remote Access Connection Manager failed
to start because the point to point protocol failed to initialize. The
request is not supported.
RasMan, event id 20035, description: Remote acces connection manager failed
to start because it could not create buffers. Restart the computer. Access
is denied.
RasMan, event id 20035 repeated
I believe I have a virus, and I'm resitant to update my Norton Antivirus so
as to kill it, since this would mean sending my credit card number over the
internet. Though I've sent my number before over the net, I havent done it
recently, and I'm a little worried that some virus is sort of hijacking
explorer.exe when it reloads at restart, somehow allowing someone remote
acces to my computer or my internet transmissions, thereby allowing them to
see my credit card number if I transmit it. I'm probably way off and being
paranoid, but computers can do that to you.
Any help is appreciated