MSScriptcontrol::unknown error

[greg]

I downloaded a script from this site
http://www.myhq.com/cgi-bin/tools/controlcenter.cgi

after registering at myhq.com I clicked the link that "add
myhq link" to favorites in IE Explorer 6.0 (XP SP1). It
works as stated, opens up a separate window where I can
drag the URL of the webpage I'm on, to be saved in their
online bookmarks site. Actually I find it useful, and
faster than waiting for my IE explorer bookmarks to scroll
down.

But now each time I start up, windows gives me the
error "MSScriptcontrol::unknown error" dialog box.
This is annoying.

I can't locate the script on my computer so it may have
just changed explorer settings when I accepted it without
putting a file on my computer, but I don't know what.
I've deleted cookies, ran spybot, ran virus program, but
still get the error.

Myhq.com seems like an old website, so support for
explorer is non-existant.

Any ideas?

 

[Guest]

after reading other posts here I downloaded and ran
winpatrol http://winpatrol.com

One of the startup programs it found was
"dxtmsft.exe"
C:\WINDOWS\SYSTEM32\DXTMSFT.EXE
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
\Run

with no other information

a google search returns nothing for dxtmsft.exe

 

[Jan Il]

Hi greg

You may have a hijacker, malware, spyware or parasites on your system
causing this problem. In addition to running your updated anti-virus
program, you should do the following to be sure none of these are present on
your system. Some variants of malware can replicate themselves over and
over if not removed properly. Please follow all instructions carefully to
be sure your system is thoroughly cleaned:

Dealing with Unwanted Spyware and Parasites:
http://mvps.org/winhelp2002/unwanted.htm
Be sure to run CWShredder, Ad-aware and Spybot.
Also be sure to use the HijackThis. Please do not post your log to this
newsgroup, but to the SpywareInfo or the Aumha HiJackThis forums
http://forum.aumha.org/viewforum.php?f=30, to allow the experts there to
evaluate your log and advise you of the necessary steps to clean your
system.

CAUTION!!!!! Before you try to remove spyware using any of the programs
below, download a copy of LSPFIX from any of the following sites:
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html
(if your OS is Win2k or XP) The process of removing certain malware may kill
your internet connection. If this should occur, this program, LSPFIX, will
enable you to regain your connection.

Also, get a copy of WINSOCKXPFIX available at:
http://www.spychecker.com/program/winsockxpfix.html
and
WinsockXP Fix- WinXP
http://www.spychecker.com/program/winsockxpfix.html
Also, with instructions, at
http://www.iup.edu/house/resnet/winfix.shtm
also
From LavaSoft- all versions of Windows-
http://digital-solutions.co.uk/lavasoft/whndnfix.zip
also ....
(NOTE: It is reported that in XP SP2, the command netsh winsock reset
will fix this problem without the need for these programs.)

or ........

Winsock Fix Utility
http://www.dfwonline.net/files/WinsockFix.zip

Also.........

Courtesy of Jim Byrd -

Download Sysclean.com, from Trend Micro, here:
http://www.trendmicro.com/download/dcs.asp along with the latest pattern
file, here:
http://www.trendmicro.com/download/pattern.asp
Be sure to read the "How-to" info here:
http://www.trendmicro.com/ftp/products/tsc/readme.txt
You might also want to get Art's updater, SYS-UP.Zip, here for future
updating of these: http://home.epix.net/~artnpeg/.
(If you download and use the updater from the beginning, it will
automatically handle downloading the other files. Place them in a dedicated
folder after appropriate unzipping, and then run. This scan may take a long
time, as Sysclean is VERY extensive and thorough

and......

Additional information on how to protect your PC:
The Parasite Fight http://www.aumha.org/a/quickfix.htm
More security tips at http://www.aumha.org/a/parasite.htm
Bugs, Glitches & Stuffups: http://www.mvps.org/inetexplorer/Darnit.htm

So how did I get infected in the first place?
http://boards.cexx.org/viewtopic.ph...ghlight=&sid=53751d8ff5915261af727df08e66ce0d
or
http://snipurl.com/980t


If these steps do not resolve your problem, please post back to this thread
with the details and any error messages.

Hope this helps

Jan
Smiles are meant to be shared,
that's why they're so contagious.

Please reply to the newsgroup so others may benefit.
Replies are posted only to the newsgroup for the benefit or other readers.

How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm

 

[Guest]

thanks Jan. I will do that and post back, if I'm
successful.... 'preciate your help....Greg

 

[Greg]

Jan,
Sysclean.com, from Trend Micro helped.
The log stated it found 3 virus, but did not indicated
that it cleaned them.
It couldn't access a lot of prefetch files and a ton of
earthlink files that came with my dell system. I've been
trying to remove those forever.

When the system started up again, I did not get the
MSScriptcontrol::unknown error

However my tiny personal firewall program said
"update.requestlookup.net [206.58.237.248], port 80 -TCP
'DXTMSFT.EXE' from your computer wants to connect to
update.requestlookup.net [206.58.237.248], port 80
details about application
c:\windows\system32\dxtmsft.exe"

when I hit deny another alert appeared

"'DXTMSFT.EXE' from your computer wants to connect to
search.requestlookup.net [206.58.237.250], port 80
verio.net"

silent runner found in
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
this startup item
"dxtmsft" = "C:\WINDOWS\System32\dxtmsft.exe" [null data]

I'm reluctant to delete it, because I don't know if
windows needs it for something.

I googled DXTMSFT.EXE - and came up with nothing.

I'm suprised since there seem to be a bunch of people
using myhq, even though it appears it has not been updated
for about 4 years.

In any event, I set the firewall rule to Deny both
connections to verio.net

So maybe myhq.com has something to do with verio.net, I
don't know.

In any event, my system is working fine and I don't get
the error msg on startup.

thanks for your help,

Greg

 

[Jan Il]

Hi Greg

Good job! Now that we have part of the problem solved, let's get rid of the
rest:

The DXTMSFT.DLL are related to the DirectX. It would seem the DXTMSFT.EXE
is trying to update some related file now.

You need to run the HiJackThis and post the log in the sites indicated to be
reviewed by the experts there. It's in the information I provided. Here's
the I have been able to find on info on Verio:
http://www.scumware.com/apps/scumwa.../article_id::1062571122/topic::Scum-Merchants

It is important that you follow all the instructions for processing the HJT
in Safe Mode, and be sure to run the SpyBot and AdAware from Safe Mode as
well. There are some forms of malware that can not be detected from Normal
Windows mode.

If these steps do not resolve your problem, please post back to this thread
with the details and any error messages.

Hope this helps

Jan
Smiles are meant to be shared,
that's why they're so contagious.

Please reply to the newsgroup so others may benefit.
Replies are posted only to the newsgroup for the benefit or other readers.

How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm

Jan,
Sysclean.com, from Trend Micro helped.
The log stated it found 3 virus, but did not indicated
that it cleaned them.
It couldn't access a lot of prefetch files and a ton of
earthlink files that came with my dell system. I've been
trying to remove those forever.

When the system started up again, I did not get the
MSScriptcontrol::unknown error

However my tiny personal firewall program said
"update.requestlookup.net [206.58.237.248], port 80 -TCP
'DXTMSFT.EXE' from your computer wants to connect to
update.requestlookup.net [206.58.237.248], port 80
details about application
c:\windows\system32\dxtmsft.exe"

when I hit deny another alert appeared

"'DXTMSFT.EXE' from your computer wants to connect to
search.requestlookup.net [206.58.237.250], port 80
verio.net"

silent runner found in
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
this startup item
"dxtmsft" = "C:\WINDOWS\System32\dxtmsft.exe" [null data]

I'm reluctant to delete it, because I don't know if
windows needs it for something.

I googled DXTMSFT.EXE - and came up with nothing.

I'm suprised since there seem to be a bunch of people
using myhq, even though it appears it has not been updated
for about 4 years.

In any event, I set the firewall rule to Deny both
connections to verio.net

So maybe myhq.com has something to do with verio.net, I
don't know.

In any event, my system is working fine and I don't get
the error msg on startup.

thanks for your help,

-----Original Message-----
Hi greg

You may have a hijacker, malware, spyware or parasites on your system
causing this problem. In addition to running your updated anti-virus
program, you should do the following to be sure none of these are
present on your system. Some variants of malware can replicate
themselves over and over if not removed properly. Please follow all
instructions carefully to be sure your system is thoroughly cleaned:

Dealing with Unwanted Spyware and Parasites:
http://mvps.org/winhelp2002/unwanted.htm
Be sure to run CWShredder, Ad-aware and Spybot.
Also be sure to use the HijackThis. Please do not post your log to
this newsgroup, but to the SpywareInfo or the Aumha HiJackThis forums
http://forum.aumha.org/viewforum.php?f=30, to allow the experts
there to evaluate your log and advise you of the necessary steps to
clean your system.

CAUTION!!!!! Before you try to remove spyware using any of the
programs below, download a copy of LSPFIX from any of the following
sites: http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html
(if your OS is Win2k or XP) The process of removing certain malware
may kill your internet connection. If this should occur, this
program, LSPFIX, will enable you to regain your connection.

Also, get a copy of WINSOCKXPFIX available at:
http://www.spychecker.com/program/winsockxpfix.html
and
WinsockXP Fix- WinXP
http://www.spychecker.com/program/winsockxpfix.html
Also, with instructions, at
http://www.iup.edu/house/resnet/winfix.shtm
also
From LavaSoft- all versions of Windows-
http://digital-solutions.co.uk/lavasoft/whndnfix.zip
also ....
(NOTE: It is reported that in XP SP2, the command netsh winsock
reset will fix this problem without the need for these programs.)

or ........

Winsock Fix Utility
http://www.dfwonline.net/files/WinsockFix.zip

Also.........

Courtesy of Jim Byrd -

Download Sysclean.com, from Trend Micro, here:
http://www.trendmicro.com/download/dcs.asp along with the latest
pattern file, here:
http://www.trendmicro.com/download/pattern.asp
Be sure to read the "How-to" info here:
http://www.trendmicro.com/ftp/products/tsc/readme.txt
You might also want to get Art's updater, SYS-UP.Zip, here for future
updating of these: http://home.epix.net/~artnpeg/.
(If you download and use the updater from the beginning, it will
automatically handle downloading the other files. Place them in a
dedicated folder after appropriate unzipping, and then run. This
scan may take a long time, as Sysclean is VERY extensive and thorough

and......

Additional information on how to protect your PC:
The Parasite Fight http://www.aumha.org/a/quickfix.htm
More security tips at http://www.aumha.org/a/parasite.htm
Bugs, Glitches & Stuffups: http://www.mvps.org/inetexplorer/Darnit.htm

So how did I get infected in the first place?
http://boards.cexx.org/viewtopic.php? t=957&start=0&postdays=0&postorder=asc&highlight=&sid=53751
d8ff5915261af727df08e66ce0d
or
http://snipurl.com/980t


If these steps do not resolve your problem, please post back to this
thread with the details and any error messages.

Hope this helps

Jan
Smiles are meant to be shared,
that's why they're so contagious.

Please reply to the newsgroup so others may benefit.
Replies are posted only to the newsgroup for the benefit or other
readers.

How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm




.