Hello Walter
Here are the results of "silent Runner" like you asked.
I also discovered that I can delete folder if I just go to them "left
click
and just press the delete button. Sometimes "RARELY" I can actually right
click on a folder and get the menu that way but the it goes back to the
same
error.
THanks for the HElp
Wiredkaveman (Kovadis)
"Silent Runners.vbs", revision 22
Operating System: Windows XP
Startup items buried in registry:
---------------------------------
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
"Yahoo! Pager" = "C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet"
["Yahoo! Inc."]
"ctfmon.exe" = "C:\windows\System32\ctfmon.exe" [MS]
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
"QuickTime Task" = ""C:\Program Files\QuickTime\qttask.exe" -atboottime"
["Apple Computer, Inc."]
"iTunesHelper" = "C:\Program Files\iTunes\iTunesHelper.exe" ["Apple
Computer, Inc."]
"MsmqIntCert" = "regsvr32 /s mqrt.dll" [file not found]
"NvCplDaemon" = "RUNDLL32.EXE C:\windows\System32\NvCpl.dll,NvStartup"
[MS]
"UpdReg" = "C:\windows\UpdReg.EXE" ["Creative Technology Ltd."]
"Jet Detection" = ""C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe""
[empty data]
"ccApp" = ""C:\Program Files\Common Files\Symantec Shared\ccApp.exe""
["Symantec Corporation"]
"Advanced Tools Check" = "C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE"
["Symantec Corporation"]
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\
"InstallShieldSetup" = "C:\PROGRA~1\INSTAL~1\{A7315~1\setup.exe
-rebootC:\PROGRA~1\INSTAL~1\{A7315~1\reboot.ini -l0x9" [file not found]
"InstallShieldSetup1" = "C:\PROGRA~1\INSTAL~1\{3FCAA~1\Setup.exe
-rebootC:\PROGRA~1\INSTAL~1\{3FCAA~1\reboot.ini -l0x9" [file not found]
HKLM\Software\Microsoft\Active Setup\Installed Components\
">{22d6f312-b0f6-11d0-94ab-0080c74c7e95}\(Default)" = "Windows Media
Player"
\StubPath =
"C:\WINDOWS\INF\unregmp2.exe /ShowWMP" [MS]
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Objects\
{02478D38-C3F9-4efb-9B51-7695ECA05670}\(Default) = "Yahoo! Companion BHO"
-> resolves to: {CLSID}\InprocServer32\(Default) =
"C:\PROGRA~1\YAHOO!\COMPAN~1\INSTALLS\cpn\ycomp5_3_12_0.dll" ["Yahoo!
Inc."]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = "AcroIEHlprObj Class"
-> resolves to: {CLSID}\InprocServer32\(Default) = "C:\Program
Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx" [empty data]
{BDF3E430-B101-42AD-A544-FADC6B084872}\(Default) = "NAV Helper"
-> resolves to: {CLSID}\InprocServer32\(Default) = "C:\Program
Files\Norton AntiVirus\NavShExt.dll" ["Symantec Corporation"]
HKLM\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\
"PostBootReminder" = "{7849596a-48ea-486e-8937-a2a3009f31a9}"
-> resolves to: {CLSID}\InprocServer32\(Default) =
"C:\windows\system32\SHELL32.dll" [MS]
"CDBurn" = "{fbeb8a05-beee-4442-804e-409d6c4515e9}"
-> resolves to: {CLSID}\InprocServer32\(Default) =
"C:\windows\system32\SHELL32.dll" [MS]
"WebCheck" = "{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
-> resolves to: {CLSID}\InprocServer32\(Default) =
"C:\windows\System32\webcheck.dll" [MS]
"SysTray" = "{35CEC8A3-2BE6-11D2-8773-92E220524153}"
-> resolves to: {CLSID}\InprocServer32\(Default) =
"C:\WINDOWS\System32\stobject.dll" [MS]
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\
INFECTION WARNING! "PCANotify\DLLName" = "PCANotify.dll" ["Symantec
Corporation"]
Startup items in "kovadis" & "All Users" startup folders:
---------------------------------------------------------
C:\Documents and Settings\All Users\Start Menu\Programs\Startup
"InterVideo WinScheduler" -> shortcut to: "C:\program
files\InterVideo\WinDVD4PR\WinScheduler.exe" ["InterVideo Inc."]
"InterVideo WinCinema Manager" -> shortcut to: "C:\program
files\InterVideo\Common\Bin\WinCinemaMgr.exe" [empty data]
"Adobe Gamma Loader" -> shortcut to: "C:\program files\common
files\Adobe\Calibration\Adobe Gamma Loader.exe" ["Adobe Systems, Inc."]
Enabled Scheduled Tasks
-----------------------
"EastTecEraser" -> launches: "C:\PROGRA~1\EAST-T~1\eraser.exe /G /B /S"
[file not found]
"Symantec NetDetect" -> launches: "C:\Program
Files\Symantec\LiveUpdate\NDETECT.EXE" ["Symantec Corporation"]
"Norton AntiVirus - Scan my computer - kovadis" -> launches:
"C:\PROGRA~1\NORTON~1\Navw32.exe /task:"C:\Documents and Settings\All
Users\Application Data\Symantec\Norton AntiVirus\Tasks\mycomp.sca""
["Symantec Corporation"]
Running Services (Display Name, Service Name, Path {Service DLL})
-----------------------------------------------------------------
Application Layer Gateway Service, ALG, "C:\windows\System32\alg.exe" [MS]
Automatic Updates, wuauserv, "C:\windows\system32\svchost.exe -k netsvcs"
{"C:\WINDOWS\System32\wuauserv.dll" [MS]}
Background Intelligent Transfer Service, BITS,
"C:\windows\System32\svchost.exe -k netsvcs"
{"C:\windows\System32\qmgr.dll"
[MS]}
COM+ Event System, EventSystem, "C:\WINDOWS\System32\svchost.exe -k
netsvcs"
{"C:\WINDOWS\System32\es.dll" [MS]}
Computer Browser, Browser, "C:\windows\System32\svchost.exe -k netsvcs"
{"C:\windows\System32\browser.dll" [MS]}
Cryptographic Services, CryptSvc, "C:\windows\system32\svchost.exe -k
netsvcs" {"C:\windows\System32\cryptsvc.dll" [MS]}
DHCP Client, Dhcp, "C:\windows\System32\svchost.exe -k netsvcs"
{"C:\windows\System32\dhcpcsvc.dll" [MS]}
Distributed Link Tracking Client, TrkWks, "C:\windows\system32\svchost.exe
-k netsvcs" {"C:\windows\system32\trkwks.dll" [MS]}
Distributed Transaction Coordinator, MSDTC,
"C:\WINDOWS\System32\msdtc.exe"
[MS]
DNS Client, Dnscache, "C:\windows\System32\svchost.exe -k NetworkService"
{"C:\windows\System32\dnsrslvr.dll" [MS]}
Error Reporting Service, ERSvc, "C:\windows\System32\svchost.exe -k
netsvcs"
{"C:\windows\System32\ersvc.dll" [MS]}
Event Log, Eventlog, "C:\windows\system32\services.exe" [MS]
Fast User Switching Compatibility, FastUserSwitchingCompatibility,
"C:\windows\System32\svchost.exe -k netsvcs"
{"C:\windows\System32\shsvcs.dll" [MS]}
Help and Support, helpsvc, "C:\windows\System32\svchost.exe -k netsvcs"
{"C:\windows\PCHealth\HelpCtr\Binaries\pchsvc.dll" [MS]}
HID Input Service, HidServ, "C:\windows\System32\svchost.exe -k netsvcs"
{"C:\windows\System32\hidserv.dll" [MS]}
IIS Admin, IISADMIN, "C:\WINDOWS\System32\inetsrv\inetinfo.exe" [MS]
Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS),
SharedAccess, "C:\windows\System32\svchost.exe -k netsvcs"
{"C:\windows\System32\ipnathlp.dll" [MS]}
iPod Service, iPodService, "C:\Program Files\iPod\bin\iPodService.exe"
["Apple Computer, Inc."]
IPSEC Services, PolicyAgent, "C:\windows\System32\lsass.exe" [MS]
Logical Disk Manager, dmserver, "C:\windows\System32\svchost.exe -k
netsvcs"
{"C:\windows\System32\dmserver.dll" ["Microsoft Corp."]}
Machine Debug Manager, MDM, ""C:\Program Files\Common Files\Microsoft
Shared\VS7Debug\mdm.exe"" [MS]
Message Queuing, MSMQ, "C:\WINDOWS\System32\mqsvc.exe" [MS]
Message Queuing Triggers, MSMQTriggers, "C:\WINDOWS\System32\mqtgsvc.exe"
[MS]
Network Connections, Netman, "C:\windows\System32\svchost.exe -k netsvcs"
{"C:\windows\System32\netman.dll" [MS]}
Network Location Awareness (NLA), Nla, "C:\windows\System32\svchost.exe -k
netsvcs" {"C:\windows\System32\mswsock.dll" [MS]}
Norton Unerase Protection, NProtectService, "C:\Program Files\Norton
AntiVirus\AdvTools\NPROTECT.EXE" ["Symantec Corporation"]
NT LM Security Support Provider, NtLmSsp, "C:\windows\System32\lsass.exe"
[MS]
NVIDIA Display Driver Service, NVSvc, "C:\windows\System32\nvsvc32.exe"
["NVIDIA Corporation"]
Plug and Play, PlugPlay, "C:\windows\system32\services.exe" [MS]
Portable Media Serial Number, WmdmPmSp,
"C:\windows\System32\svchost.exe -k
netsvcs" {"C:\WINDOWS\System32\mspmspsv.dll" [MS]}
Print Spooler, Spooler, "C:\windows\system32\spoolsv.exe" [MS]
Remote Access Connection Manager, RasMan, "C:\windows\System32\svchost.exe
-k netsvcs" {"C:\windows\System32\rasmans.dll" [MS]}
Remote Procedure Call (RPC), RpcSs, "C:\windows\system32\svchost -k rpcss"
{"C:\windows\system32\rpcss.dll" [MS]}
Remote Registry, RemoteRegistry, "C:\windows\system32\svchost.exe -k
LocalService" {"C:\windows\system32\regsvc.dll" [MS]}
SAVScan, SAVScan, "C:\Program Files\Norton AntiVirus\SAVScan.exe"
["Symantec
Corporation"]
Secondary Logon, seclogon, "C:\windows\System32\svchost.exe -k netsvcs"
{"C:\windows\System32\seclogon.dll" [MS]}
Security Accounts Manager, SamSs, "C:\windows\system32\lsass.exe" [MS]
Server, lanmanserver, "C:\windows\System32\svchost.exe -k netsvcs"
{"C:\windows\System32\srvsvc.dll" [MS]}
Shell Hardware Detection, ShellHWDetection,
"C:\windows\System32\svchost.exe
-k netsvcs" {"C:\windows\System32\shsvcs.dll" [MS]}
Simple Mail Transfer Protocol (SMTP), SMTPSVC,
"C:\WINDOWS\System32\inetsrv\inetinfo.exe" [MS]
SNMP Service, SNMP, "C:\windows\System32\snmp.exe" [MS]
SSDP Discovery Service, SSDPSRV, "C:\windows\System32\svchost.exe -k
LocalService" {"C:\windows\System32\ssdpsrv.dll" [MS]}
Symantec Core LC, Symantec Core LC, "C:\Program Files\Common
Files\Symantec
Shared\CCPD-LC\symlcsvc.exe" ["Symantec Corporation"]
Symantec Event Manager, ccEvtMgr, ""C:\Program Files\Common Files\Symantec
Shared\ccEvtMgr.exe"" ["Symantec Corporation"]
Symantec Settings Manager, ccSetMgr, ""C:\Program Files\Common
Files\Symantec Shared\ccSetMgr.exe"" ["Symantec Corporation"]
System Event Notification, SENS, "C:\windows\system32\svchost.exe -k
netsvcs" {"C:\windows\system32\sens.dll" [MS]}
System Restore Service, srservice, "C:\windows\System32\svchost.exe -k
netsvcs" {"C:\WINDOWS\System32\srsvc.dll" [MS]}
Task Scheduler, Schedule, "C:\windows\System32\svchost.exe -k netsvcs"
{"C:\windows\system32\schedsvc.dll" [MS]}
TCP/IP NetBIOS Helper, LmHosts, "C:\windows\System32\svchost.exe -k
LocalService" {"C:\windows\System32\lmhsvc.dll" [MS]}
Telephony, TapiSrv, "C:\windows\System32\svchost.exe -k netsvcs"
{"C:\windows\System32\tapisrv.dll" [MS]}
Terminal Services, TermService, "C:\windows\System32\svchost.exe -k
netsvcs"
{"C:\windows\System32\termsrv.dll" [MS]}
Themes, Themes, "C:\windows\System32\svchost.exe -k netsvcs"
{"C:\windows\System32\shsvcs.dll" [MS]}
Upload Manager, uploadmgr, "C:\windows\System32\svchost.exe -k netsvcs"
{"C:\windows\PCHealth\HelpCtr\Binaries\pchsvc.dll" [MS]}
WebClient, WebClient, "C:\windows\System32\svchost.exe -k LocalService"
{"C:\windows\System32\webclnt.dll" [MS]}
Windows Audio, AudioSrv, "C:\windows\System32\svchost.exe -k netsvcs"
{"C:\windows\System32\audiosrv.dll" [MS]}
Windows Image Acquisition (WIA), stisvc,
"C:\windows\System32\svchost.exe -k
imgsvc" {"C:\windows\system32\wiaservc.dll" [MS]}
Windows Management Instrumentation, winmgmt,
"C:\windows\system32\svchost.exe -k netsvcs"
{"C:\windows\system32\wbem\WMIsvc.dll" [MS]}
Windows Time, W32Time, "C:\windows\System32\svchost.exe -k netsvcs"
{"C:\WINDOWS\System32\w32time.dll" [MS]}
Wireless Zero Configuration, WZCSVC, "C:\windows\System32\svchost.exe -k
netsvcs" {"C:\windows\System32\wzcsvc.dll" [MS]}
Workstation, lanmanworkstation, "C:\windows\System32\svchost.exe -k
netsvcs"
{"C:\windows\System32\wkssvc.dll" [MS]}
World Wide Web Publishing, W3SVC,
"C:\windows\System32\inetsrv\inetinfo.exe"
[MS]
Norton AntiVirus Auto Protect Service, navapsvc, ""C:\Program Files\Norton
AntiVirus\navapsvc.exe"" ["Symantec Corporation"]
Walter Clayton said:
Go to
http://www.silentrunners.org/ and download "silent runners.vbs"
Three things from a diagnostic stand point. It looks like something is
hooking the shell although there is nothing obvious I can find at
present.
Run "silent runners" and copy and paste the results back here. That will
tell me what you have running outside the normal MS supplied startup
stuff.
You can also try the delete in safe mode to see what happens as well as
doing the delete via command line 'rmdir /s [path]'. You can use 'rmdir
/?'
for an explanation.
--
Walter Clayton - MS MVP(WinXP)
Associate Expert
http://www.microsoft.com/windowsxp/expertzone
Any technology distinguishable from magic is insufficiently advanced.
http://www.dts-l.org
http://support.microsoft.com/servicedesks/fileversion/default.asp|
Kovadis said:
Hello
I have the same problem; I tried everything that Walter suggested and
no
results.
I connot "Right click" on any of the folders on my drives because I get
that
same error message.
HELP PLEASE.
Kovadis
:
Then try doing shift-delete to bypass the recycle bin.
Something also just occured to me. If you have Norton protected
recycle
bin
installed disable it as well.
--
Walter Clayton - MS MVP(WinXP)
Associate Expert
http://www.microsoft.com/windowsxp/expertzone
Any technology distinguishable from magic is insufficiently advanced.
http://www.dts-l.org
http://support.microsoft.com/servicedesks/fileversion/default.asp|
On Tue, 10 Aug 2004 18:20:20 -0400, "Walter Clayton"
Try with NAV disabled to see what happens. If you're running
Liveupdate
the
executable part of NAV is being updated as well. The NAV you're
running
today isn't necessarily what came of the box.
OK I will give it a shot!
What if that doesn't help?