Quick Launch disappearing

[Matt]

Whenever I restart my computer or log out the quick launch
disappears, this changed from a few days ago when it would
re-order the arrangement of icons in it, and would load the
search assistant, no matter how many times I disabled it.
Now neither one of them start when I start my computer,
even if I log of and quick launch is there when I shut down.


Matt

 

[Ramesh [MVP]]

Hi Matt,

The "Search Assistant" bar is a malware, and it seems to reset the Taskbar settings.

Type the command in RUN box.
Regsvr32 /u C:\Windows\System32\omniband.dll

Then, rename C:\Windows\System32\omniband.dll to old omniband.dll and restart Windows.

If the bar is not removed, run this program and post the log:
http://www.mvps.org/sramesh2k/Deskbands.exe

Additionally, download all the spyware cleaners and run them.
Lavasoft Ad-Aware - www.lavasoftusa.com
SpyBot S&D - http://www.safer-networking.org/
CWShredder : http://www.spywareinfo.com/~merijn/files/CWShredder.exe
Online Spyware scan: Do you have parasites?: http://aumha.org/a/noads.php

Reboot and check if the QuickLaunch preferences are saved. If not, apply this VBS:

Line 164. Restore Taskbar to Default Functionality
http://www.kellys-korner-xp.com/xp_tweaks.htm

--
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

Whenever I restart my computer or log out the quick launch
disappears, this changed from a few days ago when it would
re-order the arrangement of icons in it, and would load the
search assistant, no matter how many times I disabled it.
Now neither one of them start when I start my computer,
even if I log of and quick launch is there when I shut down.


Matt

 

[Chris Cox]

Hi Ramesh,

I'm suffering the exact same symptoms as Matt. Basically:

- at some point yesterday it stopped remembering how big I had my quick
launch set and the order of the icons
- later the quick launch disappeared altogether and search assistant was
present
- I ran Ad-Aware and SpyBot S&D and the search assistant was gone, but the
quick launch fails to start on boot

I've tried applying Windows XP Service Pack 1 which failed at the last stage
(hung on "Running processes after install" stage). It made no difference.
I'm planning on trying Service Pack 1a which I believe is out now.

I followed your suggestions to the letter. I even ran the tweak script from
Kelly but to no avail, whenever I start up, no quick launch.

The log from your Deskbands program is:

--------------------------------
List of installed Deskbands

{01E04581-4EEE-11d0-BFE9-00AA005B4383}
&Address
%SystemRoot%\System32\browseui.dll

{0E5CBF21-D15F-11d0-8301-00AA005B4383}
&Links
%SystemRoot%\system32\SHELL32.dll

{540D8A8B-1C3F-4E32-8132-530F6A502090}
Language bar
C:\WINDOWS\System32\msutb.dll
-------------------------------------

The other interesting thing is that everytime I reboot and run AdAware and
SpyBot, the following things get detected:

- DSO Exploit
- BlazeFind.Bridge

They remove them successfully, but sure enough on reboot they're back.
Something isn't cleaning them up properly or something is reinstalling them.

I'm getting to the end of my tether. If the service pack doesn't work, I'm
thinking I'm going to need a reformat :-(

Any help would be GREATLY appreciated!

Best regards,
Chris

Hi Matt,

The "Search Assistant" bar is a malware, and it seems to reset the Taskbar
settings.

Type the command in RUN box.
Regsvr32 /u C:\Windows\System32\omniband.dll

Then, rename C:\Windows\System32\omniband.dll to old omniband.dll and
restart Windows.

If the bar is not removed, run this program and post the log:
http://www.mvps.org/sramesh2k/Deskbands.exe

Additionally, download all the spyware cleaners and run them.
Lavasoft Ad-Aware - www.lavasoftusa.com
SpyBot S&D - http://www.safer-networking.org/
CWShredder : http://www.spywareinfo.com/~merijn/files/CWShredder.exe
Online Spyware scan: Do you have parasites?: http://aumha.org/a/noads.php

Reboot and check if the QuickLaunch preferences are saved. If not, apply
this VBS:

Line 164. Restore Taskbar to Default Functionality
http://www.kellys-korner-xp.com/xp_tweaks.htm

--
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

Whenever I restart my computer or log out the quick launch
disappears, this changed from a few days ago when it would
re-order the arrangement of icons in it, and would load the
search assistant, no matter how many times I disabled it.
Now neither one of them start when I start my computer,
even if I log of and quick launch is there when I shut down.


Matt

 

[Chris Cox]

Hi Ramesh,

I'm suffering the exact same symptoms as Matt. Basically:

- at some point yesterday it stopped remembering how big I had my quick
launch set and the order of the icons
- later the quick launch disappeared altogether and search assistant was
present
- I ran Ad-Aware and SpyBot S&D and the search assistant was gone, but the
quick launch fails to start on boot

Oh, I've also run CWShredder (came up clean), and Online Spyware scan (also
clean). Also done a full virus scan with nothing revealed using Norton
AntiVirus 2003.

 

[Chris Cox]

Hi Ramesh,

I'm suffering the exact same symptoms as Matt. Basically:

- at some point yesterday it stopped remembering how big I had my quick
launch set and the order of the icons
- later the quick launch disappeared altogether and search assistant was
present
- I ran Ad-Aware and SpyBot S&D and the search assistant was gone, but the
quick launch fails to start on boot

I've tried applying Windows XP Service Pack 1 which failed at the last stage
(hung on "Running processes after install" stage). It made no difference.
I'm planning on trying Service Pack 1a which I believe is out now.

I followed your suggestions to the letter. I even ran the tweak script from
Kelly but to no avail, whenever I start up, no quick launch.

OK, quick update. My Quick Launch bar is now back. I ran a bunch of
Windows Updates that appeared in my systray and that seems to have fixed it.
That's making me feel better, because I simply can't live without it

However, the problem with BlazeFind.Bridge returning on every reboot
remains.

Dealing with that problem now...

Chris

 

[Ramesh [MVP]]

Hi Chris,

Saw the HJT log and replied to ur email.

--
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

Hi Ramesh,

I'm suffering the exact same symptoms as Matt. Basically:

- at some point yesterday it stopped remembering how big I had my quick
launch set and the order of the icons
- later the quick launch disappeared altogether and search assistant was
present
- I ran Ad-Aware and SpyBot S&D and the search assistant was gone, but the
quick launch fails to start on boot

I've tried applying Windows XP Service Pack 1 which failed at the last stage
(hung on "Running processes after install" stage). It made no difference.
I'm planning on trying Service Pack 1a which I believe is out now.

I followed your suggestions to the letter. I even ran the tweak script from
Kelly but to no avail, whenever I start up, no quick launch.

OK, quick update. My Quick Launch bar is now back. I ran a bunch of
Windows Updates that appeared in my systray and that seems to have fixed it.
That's making me feel better, because I simply can't live without it

However, the problem with BlazeFind.Bridge returning on every reboot
remains.

Dealing with that problem now...

Chris

 

[Guest]

Can you give me the same info?
I still can't get my darn quicklaunch to stay put after boot either, and I too used
the fix from Kelly's Korner.
Thanks so much!
T

 

[Ramesh [MVP]]

Chris had his problem resolved by eliminating spyware from his PC. Blazefind was causing the QL settings reset. You may post your HijackThis log to Spywareinfo.com or AumHa.org forums.

--
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

Can you give me the same info?
I still can't get my darn quicklaunch to stay put after boot either, and I too used
the fix from Kelly's Korner.
Thanks so much!
T

 

[Guest]

So essentially I still have spyware on my machine that Ad-Aware, Spybot & CWshred all missed?

 

[Chris Cox]

So essentially I still have spyware on my machine that Ad-Aware, Spybot &

CWshred all missed?

There were elements of BlazeFind that Ad-Aware didn't pick up until I
cranked up the sensitivity and depth of its searching.

Even then there were specific items in the HijackThis log that needed to be
removed manually.

Can't recall exactly where the instructions for improving Ad-Aware were, but
they were similar to this:
http://www.cjwd.demon.co.uk/spybot-adaware.html

I also posted my HijackThis log at:
http://www.wilderssecurity.com/forumdisplay.php?f=26

There's a couple of good guys there that go through your log and check it
out. Luckily for me, between Ad-Aware and Ramesh I'd already cleaned it ;-)

I still have a bit of weird behaviour on my machine though. Intermittently
it will either crash and reboot itself after logging in, or it will flash up
an error saying "Server is busy" with options to "Switch to" or "Retry".
Switch to brings up the Start Menu, Retry does nothing.

Haven't worked out what process is causing that, but there's nothing in my
HijackThis log to suggest there's anything Spyware related.

I may have to relent and reinstall my OS anyway. But hey, my QL bar is
staying put ;-)

Chris

 

[Ramesh [MVP]]

Chris,

You may try R'Mon from Sysinternals. Load R'Mon and track all the processes when you see this errors and note down the process names causing this at that time (turn on "Clock Time" option, that would be useful). If running XP Pro, type :

"Tasklist /M C:\ListTasks.txt" (from Command Prompt) and have a look at the ListTasks.txt file to know what's going on.

For XP Home, get a copy of Tasklist from here:
http://www.mvps.org/sramesh2k/utils/tasklist.exe

Then, start MSCONFIG and switch to Services tab. Check "Hide all Microsoft services", have a look at what are the additional ones left out, and do a drill-down on each service. Additionally, get Autoruns from www.sysinternals.com It catches many startup entries which MSCONFIG or HijackThis will not. Generate a Log file using Autoruns.

--
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

So essentially I still have spyware on my machine that Ad-Aware, Spybot &

CWshred all missed?

There were elements of BlazeFind that Ad-Aware didn't pick up until I
cranked up the sensitivity and depth of its searching.

Even then there were specific items in the HijackThis log that needed to be
removed manually.

Can't recall exactly where the instructions for improving Ad-Aware were, but
they were similar to this:
http://www.cjwd.demon.co.uk/spybot-adaware.html

I also posted my HijackThis log at:
http://www.wilderssecurity.com/forumdisplay.php?f=26

There's a couple of good guys there that go through your log and check it
out. Luckily for me, between Ad-Aware and Ramesh I'd already cleaned it ;-)

I still have a bit of weird behaviour on my machine though. Intermittently
it will either crash and reboot itself after logging in, or it will flash up
an error saying "Server is busy" with options to "Switch to" or "Retry".
Switch to brings up the Start Menu, Retry does nothing.

Haven't worked out what process is causing that, but there's nothing in my
HijackThis log to suggest there's anything Spyware related.

I may have to relent and reinstall my OS anyway. But hey, my QL bar is
staying put ;-)

Chris

 

[Chris Cox]

Ramesh,

I tried this. The Regmon tool I set to run on next boot and my machine
wouldn't start. Needed to use "last known good configuration" to get going.

Nothing else seemed to bring up anything that sparked alarm bells with me.

Chris

Chris,

You may try R'Mon from Sysinternals. Load R'Mon and track all the processes
when you see this errors and note down the process names causing this at
that time (turn on "Clock Time" option, that would be useful). If running XP
Pro, type :

"Tasklist /M C:\ListTasks.txt" (from Command Prompt) and have a look at the
ListTasks.txt file to know what's going on.

For XP Home, get a copy of Tasklist from here:
http://www.mvps.org/sramesh2k/utils/tasklist.exe

Then, start MSCONFIG and switch to Services tab. Check "Hide all Microsoft
services", have a look at what are the additional ones left out, and do a
drill-down on each service. Additionally, get Autoruns from
www.sysinternals.com It catches many startup entries which MSCONFIG or
HijackThis will not. Generate a Log file using Autoruns.

--
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

So essentially I still have spyware on my machine that Ad-Aware, Spybot &

CWshred all missed?

There were elements of BlazeFind that Ad-Aware didn't pick up until I
cranked up the sensitivity and depth of its searching.

Even then there were specific items in the HijackThis log that needed to be
removed manually.

Can't recall exactly where the instructions for improving Ad-Aware were, but
they were similar to this:
http://www.cjwd.demon.co.uk/spybot-adaware.html

I also posted my HijackThis log at:
http://www.wilderssecurity.com/forumdisplay.php?f=26

There's a couple of good guys there that go through your log and check it
out. Luckily for me, between Ad-Aware and Ramesh I'd already cleaned it ;-)

I still have a bit of weird behaviour on my machine though. Intermittently
it will either crash and reboot itself after logging in, or it will flash up
an error saying "Server is busy" with options to "Switch to" or "Retry".
Switch to brings up the Start Menu, Retry does nothing.

Haven't worked out what process is causing that, but there's nothing in my
HijackThis log to suggest there's anything Spyware related.

I may have to relent and reinstall my OS anyway. But hey, my QL bar is
staying put ;-)

Chris

 

[David Candy]

Does this happen if your firewall is disabled. Just a wild guess.

 

[Chris Cox]

Don't have a personal firewall on my machine. Have an external
firewall/router at home, and another at work.

Does this happen if your firewall is disabled. Just a wild guess.

 

[Ramesh [MVP]]

Chris, You don't need to set the option to run on next boot. Create a shortcut for it and launch once you're logged on. BTW, have you tried Tasklist /M >c:\ListTasks.txt ?

--
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

Ramesh,

I tried this. The Regmon tool I set to run on next boot and my machine
wouldn't start. Needed to use "last known good configuration" to get going.

Nothing else seemed to bring up anything that sparked alarm bells with me.

Chris

Chris,

You may try R'Mon from Sysinternals. Load R'Mon and track all the processes
when you see this errors and note down the process names causing this at
that time (turn on "Clock Time" option, that would be useful). If running XP
Pro, type :

"Tasklist /M C:\ListTasks.txt" (from Command Prompt) and have a look at the
ListTasks.txt file to know what's going on.

For XP Home, get a copy of Tasklist from here:
http://www.mvps.org/sramesh2k/utils/tasklist.exe

Then, start MSCONFIG and switch to Services tab. Check "Hide all Microsoft
services", have a look at what are the additional ones left out, and do a
drill-down on each service. Additionally, get Autoruns from
www.sysinternals.com It catches many startup entries which MSCONFIG or
HijackThis will not. Generate a Log file using Autoruns.

--
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

So essentially I still have spyware on my machine that Ad-Aware, Spybot &

CWshred all missed?

There were elements of BlazeFind that Ad-Aware didn't pick up until I
cranked up the sensitivity and depth of its searching.

Even then there were specific items in the HijackThis log that needed to be
removed manually.

Can't recall exactly where the instructions for improving Ad-Aware were, but
they were similar to this:
http://www.cjwd.demon.co.uk/spybot-adaware.html

I also posted my HijackThis log at:
http://www.wilderssecurity.com/forumdisplay.php?f=26

There's a couple of good guys there that go through your log and check it
out. Luckily for me, between Ad-Aware and Ramesh I'd already cleaned it ;-)

I still have a bit of weird behaviour on my machine though. Intermittently
it will either crash and reboot itself after logging in, or it will flash up
an error saying "Server is busy" with options to "Switch to" or "Retry".
Switch to brings up the Start Menu, Retry does nothing.

Haven't worked out what process is causing that, but there's nothing in my
HijackThis log to suggest there's anything Spyware related.

I may have to relent and reinstall my OS anyway. But hey, my QL bar is
staying put ;-)

Chris

 

[Chris Cox]

OK, I'll try that next time.

I've run TaskList and have the file. Should I post it in message, email it
to you or post it on a forum somewhere?

Cheers,
Chris

Chris, You don't need to set the option to run on next boot. Create a
shortcut for it and launch once you're logged on. BTW, have you tried
Tasklist /M >c:\ListTasks.txt ?

--
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

Ramesh,

I tried this. The Regmon tool I set to run on next boot and my machine
wouldn't start. Needed to use "last known good configuration" to get going.

Nothing else seemed to bring up anything that sparked alarm bells with me.

Chris

Chris,

You may try R'Mon from Sysinternals. Load R'Mon and track all the processes
when you see this errors and note down the process names causing this at
that time (turn on "Clock Time" option, that would be useful). If running XP
Pro, type :

"Tasklist /M C:\ListTasks.txt" (from Command Prompt) and have a look at the
ListTasks.txt file to know what's going on.

For XP Home, get a copy of Tasklist from here:
http://www.mvps.org/sramesh2k/utils/tasklist.exe

Then, start MSCONFIG and switch to Services tab. Check "Hide all Microsoft
services", have a look at what are the additional ones left out, and do a
drill-down on each service. Additionally, get Autoruns from
www.sysinternals.com It catches many startup entries which MSCONFIG or
HijackThis will not. Generate a Log file using Autoruns.

--
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

So essentially I still have spyware on my machine that Ad-Aware, Spybot &

CWshred all missed?

There were elements of BlazeFind that Ad-Aware didn't pick up until I
cranked up the sensitivity and depth of its searching.

Even then there were specific items in the HijackThis log that needed to be
removed manually.

Can't recall exactly where the instructions for improving Ad-Aware were, but
they were similar to this:
http://www.cjwd.demon.co.uk/spybot-adaware.html

I also posted my HijackThis log at:
http://www.wilderssecurity.com/forumdisplay.php?f=26

There's a couple of good guys there that go through your log and check it
out. Luckily for me, between Ad-Aware and Ramesh I'd already cleaned it ;-)

I still have a bit of weird behaviour on my machine though. Intermittently
it will either crash and reboot itself after logging in, or it will flash up
an error saying "Server is busy" with options to "Switch to" or "Retry".
Switch to brings up the Start Menu, Retry does nothing.

Haven't worked out what process is causing that, but there's nothing in my
HijackThis log to suggest there's anything Spyware related.

I may have to relent and reinstall my OS anyway. But hey, my QL bar is
staying put ;-)

Chris

 

[Ramesh [MVP]]

You may post it here.

--
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

OK, I'll try that next time.

I've run TaskList and have the file. Should I post it in message, email it
to you or post it on a forum somewhere?

Cheers,
Chris

Chris, You don't need to set the option to run on next boot. Create a
shortcut for it and launch once you're logged on. BTW, have you tried
Tasklist /M >c:\ListTasks.txt ?

--
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

Ramesh,

I tried this. The Regmon tool I set to run on next boot and my machine
wouldn't start. Needed to use "last known good configuration" to get going.

Nothing else seemed to bring up anything that sparked alarm bells with me.

Chris

Chris,

You may try R'Mon from Sysinternals. Load R'Mon and track all the processes
when you see this errors and note down the process names causing this at
that time (turn on "Clock Time" option, that would be useful). If running XP
Pro, type :

"Tasklist /M C:\ListTasks.txt" (from Command Prompt) and have a look at the
ListTasks.txt file to know what's going on.

For XP Home, get a copy of Tasklist from here:
http://www.mvps.org/sramesh2k/utils/tasklist.exe

Then, start MSCONFIG and switch to Services tab. Check "Hide all Microsoft
services", have a look at what are the additional ones left out, and do a
drill-down on each service. Additionally, get Autoruns from
www.sysinternals.com It catches many startup entries which MSCONFIG or
HijackThis will not. Generate a Log file using Autoruns.

--
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

So essentially I still have spyware on my machine that Ad-Aware, Spybot &

CWshred all missed?

There were elements of BlazeFind that Ad-Aware didn't pick up until I
cranked up the sensitivity and depth of its searching.

Even then there were specific items in the HijackThis log that needed to be
removed manually.

Can't recall exactly where the instructions for improving Ad-Aware were, but
they were similar to this:
http://www.cjwd.demon.co.uk/spybot-adaware.html

I also posted my HijackThis log at:
http://www.wilderssecurity.com/forumdisplay.php?f=26

There's a couple of good guys there that go through your log and check it
out. Luckily for me, between Ad-Aware and Ramesh I'd already cleaned it ;-)

I still have a bit of weird behaviour on my machine though. Intermittently
it will either crash and reboot itself after logging in, or it will flash up
an error saying "Server is busy" with options to "Switch to" or "Retry".
Switch to brings up the Start Menu, Retry does nothing.

Haven't worked out what process is causing that, but there's nothing in my
HijackThis log to suggest there's anything Spyware related.

I may have to relent and reinstall my OS anyway. But hey, my QL bar is
staying put ;-)

Chris

 

[Chris Cox]

TaskList log as requested. Note that I was running some applications at the
time (IE, HomeSite, Putty etc):


Image Name PID Modules
========================= ======
=============================================
System Idle Process 0 N/A
System 4 N/A
smss.exe 584 ntdll.dll
csrss.exe 640 ntdll.dll, CSRSRV.dll, basesrv.dll,
winsrv.dll, USER32.dll, KERNEL32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
LPK.DLL, USP10.dll, sxs.dll
winlogon.exe 664 ntdll.dll, kernel32.dll, msvcrt.dll,
ADVAPI32.dll, RPCRT4.dll, GDI32.dll,
USER32.dll, USERENV.dll, NDdeApi.dll,
CRYPT32.dll, MSASN1.dll, Secur32.dll,
WINSTA.dll, PROFMAP.dll, NETAPI32.dll,
REGAPI.dll, WS2_32.dll, WS2HELP.dll,
AUTHZ.dll, PSAPI.DLL, VERSION.dll,
SETUPAPI.dll, IMM32.DLL, LPK.DLL,
USP10.dll,
MSGINA.dll, SHELL32.dll, SHLWAPI.dll,
COMCTL32.dll, ODBC32.dll, comdlg32.dll,
comctl32.dll, odbcint.dll, SHSVCS.dll,
sfc.dll, sfc_os.dll, WINTRUST.dll,
ole32.dll, IMAGEHLP.dll, msctfime.ime,
WINSCARD.DLL, WTSAPI32.dll, cscdll.dll,
rsaenh.dll, WlNotify.dll, WINMM.dll,
WINSPOOL.DRV, MPR.dll, SYNCOR11.DLL,
UxTheme.dll, sxs.dll, msv1_0.dll,
wldap32.dll, SAMLIB.dll, cscui.dll,
drprov.dll, ntlanman.dll, NETUI0.dll,
NETUI1.dll, NETRAP.dll, davclnt.dll,
wdmaud.drv, msacm32.drv, MSACM32.dll,
COMRes.dll, OLEAUT32.dll, CLBCATQ.DLL,
midimap.dll, NTMARTA.DLL, wbemprox.dll,
wbemcomn.dll, wbemsvc.dll, fastprox.dll,
Apphelp.dll
services.exe 708 ntdll.dll, kernel32.dll, msvcrt.dll,
ADVAPI32.dll, RPCRT4.dll, USER32.dll,
GDI32.dll, USERENV.dll, SCESRV.dll,
AUTHZ.dll, umpnpmgr.dll, WINSTA.dll,
NCObjAPI.DLL, IMM32.DLL, LPK.DLL,
USP10.dll,
secur32.dll, eventlog.dll, WS2_32.dll,
WS2HELP.dll, PSAPI.DLL, wtsapi32.dll,
netapi32.dll, Apphelp.dll
lsass.exe 720 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, LSASRV.dll, msvcrt.dll,
Secur32.dll, USER32.dll, GDI32.dll,
SAMSRV.dll, cryptdll.dll, DNSAPI.dll,
WS2_32.dll, WS2HELP.dll, MSASN1.dll,
NETAPI32.dll, SAMLIB.dll, MPR.dll,
NTDSAPI.dll, WLDAP32.dll, IMM32.DLL,
LPK.DLL, USP10.dll, msprivs.dll,
kerberos.dll, msv1_0.dll, netlogon.dll,
w32time.dll, MSVCP60.dll, iphlpapi.dll,
USERENV.dll, schannel.dll, CRYPT32.dll,
wdigest.dll, rsaenh.dll, scecli.dll,
SETUPAPI.dll, OLEAUT32.dll, OLE32.DLL,
shell32.dll, SHLWAPI.dll, comctl32.dll,
comctl32.dll, mswsock.dll, wshtcpip.dll,
ipsecsvc.dll, oakley.DLL, WINIPSEC.DLL,
pstorsvc.dll, psbase.dll, dssenh.dll
svchost.exe 896 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, rpcss.dll, msvcrt.dll,
WS2_32.dll, WS2HELP.dll, USER32.dll,
GDI32.dll, Secur32.dll, IMM32.DLL, LPK.DLL,
USP10.dll, userenv.dll, rsaenh.dll,
mswsock.dll, wshtcpip.dll, DNSAPI.dll,
iphlpapi.dll, winrnr.dll, WLDAP32.dll,
rasadhlp.dll, CLBCATQ.DLL, ole32.dll,
OLEAUT32.dll, COMRes.dll, VERSION.dll,
Apphelp.dll, msi.dll
svchost.exe 1056 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, ole32.dll, GDI32.dll,
USER32.dll, IMM32.DLL, LPK.DLL, USP10.dll,
dhcpcsvc.dll, msvcrt.dll, DNSAPI.dll,
WS2_32.dll, WS2HELP.dll, iphlpapi.dll,
Secur32.dll, mswsock.dll, wshtcpip.dll,
termsrv.dll, ICAAPI.dll, OLEAUT32.dll,
AUTHZ.dll, mstlsapi.dll, ACTIVEDS.dll,
adsldpc.dll, NETAPI32.dll, WLDAP32.dll,
ATL.DLL, CRYPT32.dll, MSASN1.dll,
wzcsvc.dll, rtutils.dll, WMI.dll,
WTSAPI32.dll, WINSTA.dll, SHLWAPI.dll,
ESENT.dll, irmon.dll, SHELL32.dll,
USERENV.dll, comctl32.dll, comctl32.dll,
REGAPI.dll, rsaenh.dll, winmm.dll,
SYNCOR11.DLL, VERSION.dll, wshirda.dll,
rastls.dll, CRYPTUI.dll, WINTRUST.dll,
IMAGEHLP.dll, WININET.dll, MPRAPI.dll,
SAMLIB.dll, SETUPAPI.dll, RASAPI32.dll,
rasman.dll, TAPI32.dll, SCHANNEL.dll,
WinSCard.dll, NTMARTA.DLL, raschap.dll,
shsvcs.dll, CLBCATQ.DLL, COMRes.dll,
msv1_0.dll, schedsvc.dll, NTDSAPI.dll,
MSIDLE.DLL, audiosrv.dll, wkssvc.dll,
cryptsvc.dll, certcli.dll, es.dll,
ersvc.dll, pchsvc.dll, srvsvc.dll,
msgsvc.dll, netman.dll, seclogon.dll,
sens.dll, tapisrv.dll, PSAPI.DLL,
srsvc.dll,
POWRPROF.dll, trkwks.dll, winspool.drv,
w32time.dll, MSVCP60.dll, rasmans.dll,
WINIPSEC.DLL, netcfgx.dll, CLUSAPI.dll,
browser.dll, wuauserv.dll, mspmspsv.dll,

wmisvc.dll, wbemcomn.dll, VSSAPI.DLL,
wuaueng.dll, ADVPACK.dll, sfc.dll,
sfc_os.dll, rastapi.dll, unimdm.tsp,
uniplat.dll, SXS.DLL, unimdmat.dll,
modemui.dll, comsvcs.dll, MTXCLU.DLL,
WSOCK32.dll, colbact.DLL, RESUTILS.DLL,
kmddsp.tsp, mtxoci.dll, ndptsp.tsp,
ipconf.tsp, h323.tsp, hidphone.tsp,
HID.DLL,
rasppp.dll, ntlsapi.dll, ipnathlp.dll,
netshell.dll, credui.dll, HNetCfg.dll,
rasadhlp.dll, wbemcore.dll, esscli.dll,
FastProx.dll, wmiutils.dll, repdrvfs.dll,
wmiprvsd.dll, NCObjAPI.DLL, wbemess.dll,
msctfime.ime, winhttp.dll, upnp.dll,
SSDPAPI.dll, msi.dll, RASDLG.dll,
ncprov.dll, qmgr.dll, SHFOLDER.dll,
qmgrprxy.dll, sensapi.dll, winrnr.dll,
Msxml3.dll, licdll.dll, dssenh.dll,
cryptnet.dll, mlang.dll, wbemsvc.dll,
catsrvut.dll, MfcSubs.dll, MPR.dll,
Cabinet.dll, urlmon.dll, catsrv.dll
svchost.exe 1212 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, dnsrslvr.dll, msvcrt.dll,
USER32.dll, GDI32.dll, DNSAPI.dll,
WS2_32.dll, WS2HELP.dll, iphlpapi.dll,
IMM32.DLL, LPK.DLL, USP10.dll, mswsock.dll,
wshtcpip.dll
svchost.exe 1244 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, ole32.dll, GDI32.dll,
USER32.dll, IMM32.DLL, LPK.DLL, USP10.dll,
lmhsvc.dll, msvcrt.dll, iphlpapi.dll,
WS2_32.dll, WS2HELP.dll, webclnt.dll,
WININET.dll, CRYPT32.dll, MSASN1.dll,
OLEAUT32.dll, SHLWAPI.dll, comctl32.dll,
shell32.dll, comctl32.dll, Secur32.dll,
wsock32.dll, mswsock.dll, DNSAPI.dll,
rasadhlp.dll, regsvc.dll, RASAPI32.DLL,
rasman.dll, NETAPI32.dll, TAPI32.dll,
rtutils.dll, WINMM.dll, SYNCOR11.DLL,
sensapi.dll, winrnr.dll, WLDAP32.dll,
wshtcpip.dll, ssdpsrv.dll
spoolsv.exe 1464 ntdll.dll, kernel32.dll, msvcrt.dll,
ADVAPI32.dll, RPCRT4.dll, GDI32.dll,
USER32.dll, IMM32.DLL, LPK.DLL, USP10.dll,
SPOOLSS.DLL, WS2_32.dll, WS2HELP.dll,
DNSAPI.dll, rasadhlp.dll, localspl.dll,
ole32.dll, OLEAUT32.dll, VERSION.dll,
Secur32.dll, sfc_os.dll, WINTRUST.dll,
CRYPT32.dll, MSASN1.dll, IMAGEHLP.dll,
USERENV.dll, winspool.drv, netapi32.dll,
cnbjmon.dll, mswsock.dll, mdimon.dll,
msi.dll, pjlmon.dll, tcpmon.dll,
usbmon.dll,
mdippr.dll, winrnr.dll, WLDAP32.dll,
win32spl.dll, NETRAP.dll, CLBCATQ.DLL,
COMRes.dll, inetpp.dll, icmp.dll,
iphlpapi.DLL
alg.exe 1604 ntdll.dll, kernel32.dll, msvcrt.dll,
ATL.DLL, ADVAPI32.dll, RPCRT4.dll,
ole32.dll, GDI32.dll, USER32.dll,
OLEAUT32.dll, WSOCK32.dll, WS2_32.dll,
WS2HELP.dll, MSWSOCK.dll, IMM32.DLL,
LPK.DLL, USP10.dll, CLBCATQ.DLL,
COMRes.dll,
VERSION.dll, hnetcfg.dll, RASAPI32.dll,
rasman.dll, NETAPI32.dll, TAPI32.dll,
SHLWAPI.dll, rtutils.dll, WINMM.dll,
netshell.dll, credui.dll, SHELL32.dll,
iphlpapi.dll, DHCPCSVC.DLL, DNSAPI.dll,
Secur32.dll, WININET.dll, CRYPT32.dll,
MSASN1.dll, SYNCOR11.DLL, comctl32.dll,
comctl32.dll, wshtcpip.dll
ati2evxx.exe 1616 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
msctfime.ime,
msvcrt.dll, ole32.dll
ccEvtMgr.exe 1728 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
ole32.dll, OLEAUT32.dll, MSVCRT.DLL,
MSVCP60.dll, ccTrust.dll, VERSION.dll,
SYMSTORE.dll, SHLWAPI.dll, MSVCIRT.dll,
IMM32.DLL, LPK.DLL, USP10.dll, Secur32.dll,
CRYPT32.dll, MSASN1.dll, rsaenh.dll,
userenv.dll, netapi32.dll, cryptnet.dll,
WLDAP32.dll, wininet.dll, comctl32.dll,
shell32.dll, comctl32.dll, wsock32.dll,
WS2_32.dll, WS2HELP.dll, NAVEvent.dll,
ccEvt.dll, CLBCATQ.DLL, COMRes.dll,
msi.dll,
SXS.DLL
Navapsvc.exe 1912 ntdll.dll, kernel32.dll, MSVCP60.dll,
MSVCRT.dll, USER32.dll, GDI32.dll,
ADVAPI32.dll, RPCRT4.dll, ole32.dll,
OLEAUT32.dll, SavRT32.dll, IMM32.DLL,
LPK.DLL, USP10.dll, CLBCATQ.DLL,
COMRes.dll,
VERSION.dll, msi.dll, SXS.DLL
svchost.exe 348 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, wiaservc.dll, msvcrt.dll,
USER32.dll, GDI32.dll, OLEAUT32.dll,
OLE32.DLL, SHLWAPI.dll, CFGMGR32.dll,
setupapi.dll, USERENV.dll, mscms.dll,
WINSPOOL.DRV, WINSTA.dll, VERSION.dll,
IMM32.DLL, LPK.DLL, USP10.dll, CLBCATQ.DLL,
COMRes.dll, ACTXPRXY.DLL, sti.dll
explorer.exe 1864 ntdll.dll, kernel32.dll, msvcrt.dll,
ADVAPI32.dll, RPCRT4.dll, GDI32.dll,
USER32.dll, SHLWAPI.dll, SHELL32.dll,
ole32.dll, OLEAUT32.dll, BROWSEUI.dll,
SHDOCVW.dll, UxTheme.dll, IMM32.DLL,
LPK.DLL, USP10.dll, comctl32.dll,
comctl32.dll, msctfime.ime, appHelp.dll,
CLBCATQ.DLL, COMRes.dll, VERSION.dll,
cscui.dll, CSCDLL.dll, themeui.dll,
Secur32.dll, MSIMG32.dll, Msimtf.dll,
MSCTF.dll, USERENV.dll, ACTXPRXY.DLL,
WININET.dll, CRYPT32.dll, MSASN1.dll,
LINKINFO.dll, ntshrui.dll, ATL.DLL,
NETAPI32.dll, urlmon.dll, MPR.dll,
drprov.dll, ntlanman.dll, NETUI0.dll,
NETUI1.dll, NETRAP.dll, SAMLIB.dll,
davclnt.dll, shdoclc.dll, msi.dll, SXS.DLL,
WINTRUST.dll, IMAGEHLP.dll, rsaenh.dll,
tbhook.dll, WINSTA.dll, SynTPFcs.dll,
webcheck.dll, stobject.dll, BatMeter.dll,
POWRPROF.dll, SETUPAPI.dll, WTSAPI32.dll,
WINMM.dll, SYNCOR11.DLL, wdmaud.drv,
msacm32.drv, MSACM32.dll, midimap.dll,
NETSHELL.dll, credui.dll, WS2_32.dll,
WS2HELP.dll, iphlpapi.dll, printui.dll,
WINSPOOL.DRV, ACTIVEDS.dll, adsldpc.dll,
WLDAP32.dll, CFGMGR32.dll, comdlg32.dll,

browselc.dll, AcroIEHelper.dll,
SDHelper.dll, olepro32.dll, NavShExt.dll,
ccTrust.dll, MSVCP60.dll, DUSER.dll,
msohev.dll, cryptnet.dll, wsock32.dll,
WZSHLSTB.DLL, mydocs.dll, eccopyhook.dll,
PICTUR~3.DLL, Wswitch.dll, oledlg.dll,
FileData.dll, zipfldr.dll,
CfShellFtpRds.dll, cfssvradmin.dll,
CFFileProxy.dll
atiptaxx.exe 236 ntdll.dll, kernel32.dll, RPCRT4.dll,
ADVAPI32.dll, USER32.dll, GDI32.dll,
SHELL32.dll, msvcrt.dll, SHLWAPI.dll,
VERSION.dll, ole32.dll, IMM32.DLL, LPK.DLL,
USP10.dll, comctl32.dll, comctl32.dll,
ATRPUIXX.ENU, CLBCATQ.DLL, OLEAUT32.dll,
COMRes.dll, atipdsxx.dll, msctfime.ime,
tbhook.dll
ltmsg.exe 1656 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
msctfime.ime,
msvcrt.dll, ole32.dll, tbhook.dll
SynTPLpr.exe 520 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
VERSION.dll, IMM32.DLL, LPK.DLL, USP10.dll,
SynTPFcs.dll, msctfime.ime, msvcrt.dll,
ole32.dll, tbhook.dll
SynTPEnh.exe 316 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
comdlg32.dll, SHLWAPI.dll, msvcrt.dll,
COMCTL32.dll, SHELL32.dll, ole32.dll,
VERSION.dll, IMM32.DLL, LPK.DLL, USP10.dll,
comctl32.dll, msctfime.ime, SynTPAPI.dll,
SynTPFcs.dll, tbhook.dll
eabservr.exe 1000 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
SHELL32.dll, msvcrt.dll, SHLWAPI.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
comctl32.dll,
comctl32.dll, EABCOMN.DLL, ole32.dll,
SETUPAPI.dll, newdev.dll, WININET.dll,
CRYPT32.dll, MSASN1.dll, OLEAUT32.dll,
credui.dll, CPQINFO.DLL, SynTPFcs.dll,
VERSION.dll, msctfime.ime, tbhook.dll
ccApp.exe 1036 ntdll.dll, kernel32.dll, SYMSTORE.dll,
ADVAPI32.dll, RPCRT4.dll, MSVCRT.dll,
COMCTL32.dll, GDI32.dll, USER32.dll,
ole32.dll, MSVCP60.dll, IMM32.DLL, LPK.DLL,
USP10.dll, SynTPFcs.dll, VERSION.dll,
msctfime.ime, wintrust.dll, CRYPT32.dll,
MSASN1.dll, IMAGEHLP.dll, rsaenh.dll,
userenv.dll, secur32.dll, netapi32.dll,
cryptnet.dll, WLDAP32.dll, wininet.dll,
OLEAUT32.dll, SHLWAPI.dll, comctl32.dll,
shell32.dll, wsock32.dll, WS2_32.dll,
WS2HELP.dll, CCEMLPXY.DLL, SYMREDIR.dll,
MSWSOCK.dll, ccErrDsp.DLL, CCREGMON.DLL,
ccEvt.DLL, ccTrust.dll, DNSAPI.dll,
CCIMSCAN.DLL, ATL.DLL, CLBCATQ.DLL,
COMRes.dll, DEFALERT.DLL, winrnr.dll,
NAVAPW32.DLL, ccPasswd.DLL, apwutil.dll,
SavRT32.dll, tbhook.dll, apwcmdnt.dll,
rasadhlp.dll, msi.dll, SXS.DLL, Msimtf.dll,
MSCTF.dll, NavEmail.dll, wshtcpip.dll,
mstask.dll, MPR.dll, comdlg32.dll,
msgsc.dll, ACTXPRXY.DLL, WINMM.dll,
SYNCOR11.DLL, SETUPAPI.dll, UxTheme.dll
iexplore.exe 1084 ntdll.dll, kernel32.dll, msvcrt.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, SHLWAPI.dll, SHDOCVW.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
comctl32.dll,
SHELL32.dll, comctl32.dll, ole32.dll,
SynTPFcs.dll, VERSION.dll, BROWSEUI.dll,
browselc.dll, appHelp.dll, CLBCATQ.DLL,
OLEAUT32.dll, COMRes.dll, msctfime.ime,
Msimtf.dll, MSCTF.dll, UxTheme.dll,
WININET.dll, CRYPT32.dll, MSASN1.dll,
Secur32.dll, cscui.dll, CSCDLL.dll,
SETUPAPI.dll, AcroIEHelper.dll,
SDHelper.dll, olepro32.dll, NavShExt.dll,
ccTrust.dll, MSVCP60.dll, ATL.DLL,
tbhook.dll, ACTXPRXY.DLL, msi.dll, SXS.DLL,
urlmon.dll, shdoclc.dll, mlang.dll,
wsock32.dll, WS2_32.dll, WS2HELP.dll,
mswsock.dll, wshtcpip.dll, userenv.dll,
netapi32.dll, wintrust.dll, IMAGEHLP.dll,
schannel.dll, RASAPI32.DLL, rasman.dll,
TAPI32.dll, rtutils.dll, WINMM.dll,
SYNCOR11.DLL, sensapi.dll, rsaenh.dll,
DNSAPI.dll, winrnr.dll, WLDAP32.dll,
rasadhlp.dll, dssenh.dll, cryptnet.dll,
mshtml.dll, scrauth.dll, ScrBlock.dll,
jscript.dll, MSLS31.DLL, msohev.dll,
mshtmled.dll, wdmaud.drv, msacm32.drv,
MSACM32.dll, midimap.dll, Flash.ocx,
comdlg32.dll, ddrawex.dll, DDRAW.dll,
DCIMAN32.dll, imgutil.dll, dispex.dll,
plugin.ocx
realsched.exe 2008 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
SynTPFcs.dll,
VERSION.dll, msctfime.ime, msvcrt.dll,
ole32.dll, NTMARTA.DLL, WLDAP32.dll,
SAMLIB.dll, tbhook.dll
TBSYSTRY.EXE 428 ntdll.dll, kernel32.dll, WINMM.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, comdlg32.dll, SHLWAPI.dll,
msvcrt.dll, COMCTL32.dll, SHELL32.dll,
WINSPOOL.DRV, ole32.dll, IMM32.DLL,
LPK.DLL,
USP10.dll, SYNCOR11.DLL, comctl32.dll,
tbhook.dll, SynTPFcs.dll, VERSION.dll,
msctfime.ime, CLBCATQ.DLL, OLEAUT32.dll,
COMRes.dll, Hhctrl.ocx
ConnMngmntBox.exe 724 ntdll.dll, kernel32.dll, CracDlr.dll,
ole32.dll, GDI32.dll, USER32.dll,
ADVAPI32.dll, RPCRT4.dll, OLEAUT32.dll,
MSVCRT.DLL, Wswitch.dll, WINSPOOL.DRV,
comdlg32.dll, SHLWAPI.dll, COMCTL32.dll,
SHELL32.dll, VERSION.dll, oledlg.dll,
WS2_32.dll, WS2HELP.dll, IMM32.DLL,
LPK.DLL,
USP10.dll, comctl32.dll, SynTPFcs.dll,
CLBCATQ.DLL, COMRes.dll, msctfime.ime,
ConnMngmntRes.dll, ConnFilter.dll,
mRouterController.dll, tbhook.dll, msi.dll,
SXS.DLL
ECTaskScheduler.exe 976 ntdll.dll, kernel32.dll, Wswitch.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, WINSPOOL.DRV, msvcrt.dll,
comdlg32.dll, SHLWAPI.dll, COMCTL32.dll,
SHELL32.dll, ole32.dll, VERSION.dll,

oledlg.dll, OLEAUT32.dll, CracDlr.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
comctl32.dll,
SynTPFcs.dll, CLBCATQ.DLL, COMRes.dll,
msi.dll, SXS.DLL, ECTaskSchedulerRes.dll,
UNIFYT~1.DLL, ECTriggerResources.DLL,
tbhook.dll, ectui.dll, ECENGI~1.DLL,
OLEPRO32.DLL, rtsock.dll, CONNEC~1.DLL,
TIMETR~1.DLL, msctfime.ime, SCRFSProxy.dll
WZQKPICK.EXE 1888 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, USER32.dll, GDI32.dll,
SHELL32.dll, msvcrt.dll, SHLWAPI.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
comctl32.dll,
SynTPFcs.dll, VERSION.dll, msctfime.ime,
ole32.dll, UxTheme.dll, Msimtf.dll,
MSCTF.dll, tbhook.dll
Elogerr.exe 2056 ntdll.dll, kernel32.dll, Wswitch.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, WINSPOOL.DRV, msvcrt.dll,
comdlg32.dll, SHLWAPI.dll, COMCTL32.dll,
SHELL32.dll, ole32.dll, VERSION.dll,
oledlg.dll, OLEPRO32.DLL, OLEAUT32.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
comctl32.dll,
SynTPFcs.dll, msctfime.ime, ELGERRRS.DLL,
CLBCATQ.DLL, COMRes.dll, tbhook.dll,
msi.dll, SXS.DLL, ECTaskSchedulerRes.dll,
ECENGRES.DLL, SCRFS.exe
MSIMN.EXE 2156 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, USER32.dll, GDI32.dll,
SHLWAPI.dll, msvcrt.dll, IMM32.DLL,
LPK.DLL,
USP10.dll, MSOE.DLL, ATL.DLL, MSOERT2.dll,
ole32.dll, OLEAUT32.dll, MSOEACCT.dll,
INETCOMM.dll, comctl32.dll, acctres.dll,
inetres.dll, msoeres.dll, SynTPFcs.dll,
VERSION.dll, SHDOCVW.DLL, WININET.dll,
CRYPT32.dll, MSASN1.dll, Secur32.dll,
shell32.dll, CLBCATQ.DLL, COMRes.dll,
msident.dll, msidntld.dll, PSTOREC.DLL,
directdb.dll, msctfime.ime, shdoclc.dll,
Msimtf.dll, MSCTF.dll, UxTheme.dll,
mlang.dll, wab32.dll, wab32res.dll,
tbhook.dll, RASAPI32.DLL, rasman.dll,
WS2_32.dll, WS2HELP.dll, NETAPI32.dll,
TAPI32.dll, rtutils.dll, WINMM.dll,
SYNCOR11.DLL, mshtml.dll, sensapi.dll,
URLMON.DLL, USERENV.dll, rsaenh.dll,
WSOCK32.DLL, mswsock.dll, DNSAPI.dll,
winrnr.dll, WLDAP32.dll, rasadhlp.dll,
wshtcpip.dll, mshtmled.dll, MSLS31.DLL,
imgutil.dll, wdmaud.drv, msacm32.drv,
MSACM32.dll, midimap.dll, appHelp.dll,
cscui.dll, CSCDLL.dll, SETUPAPI.dll,
RICHED20.DLL, SXS.DLL, MSI.DLL, Hhctrl.ocx,
NTMARTA.DLL, SAMLIB.dll, itss.dll,
scrauth.dll, ScrBlock.dll, wintrust.dll,
IMAGEHLP.dll, cryptnet.dll, jscript.dll,
browseui.dll, MPR.dll, drprov.dll,
ntlanman.dll, NETUI0.dll, NETUI1.dll,
NETRAP.dll, davclnt.dll, wiashext.dll,
gdiplus.dll, sti.dll, CFGMGR32.dll
mRouterRuntime.exe 2188 ntdll.dll, kernel32.dll, WSOCK32.dll,
WS2_32.dll, msvcrt.dll, WS2HELP.dll,
ADVAPI32.dll, RPCRT4.dll,
mRouterGateway.DLL, USER32.dll, GDI32.dll,
comdlg32.dll, SHLWAPI.dll, COMCTL32.dll,
SHELL32.dll, WINSPOOL.DRV, ole32.dll,
OLEAUT32.dll, mRouterPropPages.DLL,
oledlg.dll, OLEPRO32.DLL, IMM32.DLL,
LPK.DLL, USP10.dll, comctl32.dll,
SynTPFcs.dll, VERSION.dll, CLBCATQ.DLL,
COMRes.dll, msctfime.ime,
mRouterController.dll, MROUTERTCP.DLL,
MROUTERSERIAL.DLL, MROUTERIRSOCKETS.DLL,
mRouterBluetooth.dll, MROUTERWINSOCK.DLL,
mswsock.dll, wshirda.dll, wtsapi32.dll,
WINSTA.dll, mRouterAccessPoint.dll,
wshtcpip.dll, tbhook.dll, msi.dll, SXS.DLL
cmd.exe 2480 ntdll.dll, kernel32.dll, msvcrt.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, IMM32.DLL, LPK.DLL, USP10.dll,
Apphelp.dll
BROADC~1.EXE 2680 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
ole32.dll, OLEAUT32.dll, MSVCRT.DLL,
IMM32.DLL, LPK.DLL, USP10.dll,
SynTPFcs.dll,
VERSION.dll, CLBCATQ.DLL, COMRes.dll,
tbhook.dll, msctfime.ime, msi.dll,
ECENGI~1.DLL, Wswitch.dll, WINSPOOL.DRV,
comdlg32.dll, SHLWAPI.dll, COMCTL32.dll,
SHELL32.dll, oledlg.dll, OLEPRO32.DLL,
CracDlr.dll, comctl32.dll, SXS.DLL,
rtsock.dll, SCRFSProxy.dll
SCRFS.exe 3772 ntdll.dll, kernel32.dll, Wswitch.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, WINSPOOL.DRV, msvcrt.dll,
comdlg32.dll, SHLWAPI.dll, COMCTL32.dll,
SHELL32.dll, ole32.dll, VERSION.dll,
oledlg.dll, CracDlr.dll, OLEAUT32.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
comctl32.dll,
SynTPFcs.dll, CLBCATQ.DLL, COMRes.dll,
msi.dll, SXS.DLL, tbhook.dll,
SCRFSProxy.dll, rtsock.dll, msctfime.ime
iexplore.exe 2560 ntdll.dll, kernel32.dll, msvcrt.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, SHLWAPI.dll, SHDOCVW.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
comctl32.dll,
SHELL32.dll, comctl32.dll, ole32.dll,
SynTPFcs.dll, VERSION.dll, BROWSEUI.dll,
browselc.dll, appHelp.dll, CLBCATQ.DLL,
OLEAUT32.dll, COMRes.dll, msctfime.ime,
Msimtf.dll, MSCTF.dll, UxTheme.dll,
WININET.dll, CRYPT32.dll, MSASN1.dll,
Secur32.dll, cscui.dll, CSCDLL.dll,
SETUPAPI.dll, AcroIEHelper.dll,
SDHelper.dll, olepro32.dll, NavShExt.dll,
ccTrust.dll, MSVCP60.dll, ATL.DLL,
urlmon.dll, shdoclc.dll, mlang.dll,
wsock32.dll, WS2_32.dll, WS2HELP.dll,
mswsock.dll, wshtcpip.dll, RASAPI32.DLL,
rasman.dll, NETAPI32.dll, TAPI32.dll,
rtutils.dll, WINMM.dll, SYNCOR11.DLL,
msi.dll, SXS.DLL, tbhook.dll, sensapi.dll,
USERENV.dll, rsaenh.dll, DNSAPI.dll,
winrnr.dll, WLDAP32.dll, rasadhlp.dll,
mshtml.dll, msohev.dll, scrauth.dll,
ScrBlock.dll, wintrust.dll, IMAGEHLP.dll,
cryptnet.dll, jscript.dll, MSLS31.DLL,
Flash.ocx, comdlg32.dll, wdmaud.drv,
msacm32.drv, MSACM32.dll, midimap.dll,

ddrawex.dll, DDRAW.dll, DCIMAN32.dll,
MPR.dll, imgutil.dll, mshtmled.dll,
MSRATING.DLL, msratelc.dll, vbscript.dll,
iepeers.dll, WINSPOOL.DRV, ACTXPRXY.DLL,
dispex.dll, drprov.dll, ntlanman.dll,
NETUI0.dll, NETUI1.dll, NETRAP.dll,
SAMLIB.dll, davclnt.dll, Msxml3.dll,
MSOXMLMF.DLL, ntshrui.dll, zipfldr.dll
msmsgs.exe 2268 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, GDI32.dll, USER32.dll,
ole32.dll, OLEAUT32.dll, MSVCRT.DLL,
COMCTL32.dll, SHLWAPI.dll, SHELL32.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
SynTPFcs.dll,
VERSION.dll, MSGSLANG.DLL, CLBCATQ.DLL,
COMRes.dll, msctfime.ime, SXS.DLL,
wtsapi32.dll, WINSTA.dll, es.dll,
WS2_32.dll, WS2HELP.dll, tbhook.dll,
msi.dll, ACTXPRXY.DLL, rtcimsp.dll,
WSOCK32.dll, rtcdll.dll, ATL.DLL,
Secur32.dll, WININET.dll, CRYPT32.dll,
MSASN1.dll, WINMM.dll, iphlpapi.dll,
DNSAPI.dll, SYNCOR11.DLL, termmgr.dll,
rtutils.dll, quartz.dll, mswsock.dll,
wshtcpip.dll, dxmrtp.dll, MSVFW32.dll,
DSOUND.dll, PSAPI.DLL, devenum.dll,
setupapi.dll, wdmaud.drv, msacm32.drv,
MSACM32.dll, midimap.dll, msdmo.dll,
dpnhupnp.dll, rasapi32.dll, rasman.dll,
NETAPI32.dll, TAPI32.dll, rsaenh.dll,
hnetcfg.dll, netshell.dll, credui.dll,
DHCPCSVC.DLL, wbemprox.dll, wbemcomn.dll,
wbemsvc.dll, fastprox.dll, USERENV.dll,
uxtheme.dll, mshtml.dll, URLMON.DLL,
mlang.dll, dpnlobby.dll, dplayx.dll,
Msimtf.dll, MSCTF.dll, wintrust.dll,
IMAGEHLP.dll, schannel.dll, sensapi.dll,
winrnr.dll, WLDAP32.dll, rasadhlp.dll,
dssenh.dll, shdocvw.dll
iexplore.exe 3312 ntdll.dll, kernel32.dll, msvcrt.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, SHLWAPI.dll, SHDOCVW.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
comctl32.dll,
SHELL32.dll, comctl32.dll, ole32.dll,
SynTPFcs.dll, VERSION.dll, BROWSEUI.dll,
browselc.dll, appHelp.dll, CLBCATQ.DLL,
OLEAUT32.dll, COMRes.dll, msctfime.ime,
Msimtf.dll, MSCTF.dll, UxTheme.dll,
WININET.dll, CRYPT32.dll, MSASN1.dll,
Secur32.dll, cscui.dll, CSCDLL.dll,
SETUPAPI.dll, AcroIEHelper.dll,
SDHelper.dll, olepro32.dll, NavShExt.dll,
ccTrust.dll, MSVCP60.dll, ATL.DLL,
urlmon.dll, shdoclc.dll, mlang.dll,
wsock32.dll, WS2_32.dll, WS2HELP.dll,
mswsock.dll, wshtcpip.dll, RASAPI32.DLL,
rasman.dll, NETAPI32.dll, TAPI32.dll,
rtutils.dll, WINMM.dll, SYNCOR11.DLL,
sensapi.dll, msi.dll, SXS.DLL, tbhook.dll,
USERENV.dll, rsaenh.dll, DNSAPI.dll,
winrnr.dll, WLDAP32.dll, rasadhlp.dll,
mshtml.dll, MSLS31.DLL, msohev.dll,
MPR.dll,
wdmaud.drv, msacm32.drv, MSACM32.dll,
midimap.dll, scrauth.dll, ScrBlock.dll,
wintrust.dll, IMAGEHLP.dll, cryptnet.dll,
jscript.dll, Flash.ocx, comdlg32.dll,
ddrawex.dll, DDRAW.dll, DCIMAN32.dll,
imgutil.dll, mshtmled.dll, Msxml3.dll,
MSOXMLMF.DLL, ACTXPRXY.DLL, dispex.dll,
drprov.dll, ntlanman.dll, NETUI0.dll,
NETUI1.dll, NETRAP.dll, SAMLIB.dll,
davclnt.dll, HLINK.DLL, MSRATING.DLL,
msratelc.dll, vbscript.dll, dxtrans.dll,
plugin.ocx, SwSupport.dll
iexplore.exe 144 ntdll.dll, kernel32.dll, msvcrt.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, SHLWAPI.dll, SHDOCVW.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
comctl32.dll,
SHELL32.dll, comctl32.dll, ole32.dll,
SynTPFcs.dll, VERSION.dll, BROWSEUI.dll,
browselc.dll, appHelp.dll, CLBCATQ.DLL,
OLEAUT32.dll, COMRes.dll, msctfime.ime,
Msimtf.dll, MSCTF.dll, UxTheme.dll,
WININET.dll, CRYPT32.dll, MSASN1.dll,
Secur32.dll, cscui.dll, CSCDLL.dll,
SETUPAPI.dll, AcroIEHelper.dll,
SDHelper.dll, olepro32.dll, NavShExt.dll,
ccTrust.dll, MSVCP60.dll, ATL.DLL,
urlmon.dll, shdoclc.dll, mlang.dll,
wsock32.dll, WS2_32.dll, WS2HELP.dll,
mswsock.dll, wshtcpip.dll, RASAPI32.DLL,
rasman.dll, NETAPI32.dll, TAPI32.dll,
rtutils.dll, WINMM.dll, SYNCOR11.DLL,
sensapi.dll, msi.dll, SXS.DLL, tbhook.dll,
USERENV.dll, rsaenh.dll, DNSAPI.dll,
winrnr.dll, WLDAP32.dll, rasadhlp.dll,
mshtml.dll, MSLS31.DLL, msohev.dll,
MPR.dll,
sti.dll, CFGMGR32.dll, wdmaud.drv,
msacm32.drv, MSACM32.dll, midimap.dll,
scrauth.dll, ScrBlock.dll, wintrust.dll,
IMAGEHLP.dll, cryptnet.dll, jscript.dll,
iepeers.dll, WINSPOOL.DRV, vbscript.dll,
Flash.ocx, comdlg32.dll, ACTXPRXY.DLL,
ddrawex.dll, DDRAW.dll, DCIMAN32.dll,
mshtmled.dll, HLINK.DLL, imgutil.dll,
dispex.dll, drprov.dll, ntlanman.dll,
NETUI0.dll, NETUI1.dll, NETRAP.dll,
SAMLIB.dll, davclnt.dll
AcroRd32.exe 3444 ntdll.dll, kernel32.dll, AGM.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, CoolType.dll, SHELL32.dll,
msvcrt.dll, SHLWAPI.dll, ole32.dll,
WINMM.dll, VERSION.dll, COMCTL32.dll,
oledlg.dll, WINSPOOL.DRV, comdlg32.dll,
OLEAUT32.dll, JP2KLib.dll, OPP.dll,
BIB.dll,
ACE.dll, IMM32.DLL, LPK.DLL, USP10.dll,
SYNCOR11.DLL, SynTPFcs.dll, msctfime.ime,
UxTheme.dll, Msimtf.dll, MSCTF.dll,
SETUPAPI.dll, ATMLIB.dll, ADMPlugin.apl,
ExpressViews.apl, MSVCP60.dll, CLBCATQ.DLL,
COMRes.dll, msi.dll, INKOBJ.DLL, ATL.DLL,
gdiplus.dll, MSIMG32.dll, tbhook.dll,
Accessibility.api, AcroForm.api,
Annots.api,
DigSig.api, eBook.api, EScript.api,
EWH32.api, HLS.api, IA32.api,
ImageViewer.API, MSVFW32.dll,
MakeAccessible.api, Multimedia.api,
PDDom.api, PictureTasks.api, PPKLite.api,
printme.api, reflow.api, SaveAsRTF.api,

Search.api, Search5.api, SendMail.api,
Soap.api, Updater.api, esdupdate.dll,
WININET.dll, CRYPT32.dll, MSASN1.dll,
weblink.api, XFA.api, Secur32.dll,
mscms.dll, riched20.dll, SXS.DLL,
Rasapi32.dll, rasman.dll, WS2_32.dll,
WS2HELP.dll, NETAPI32.dll, TAPI32.dll,
rtutils.dll, mswsock.dll, DNSAPI.dll,
winrnr.dll, WLDAP32.dll, rasadhlp.dll,
Wtsapi32.dll, WINSTA.dll, appHelp.dll,
cscui.dll, CSCDLL.dll, ntshrui.dll,
USERENV.dll, MPR.dll, drprov.dll,
ntlanman.dll, NETUI0.dll, NETUI1.dll,
NETRAP.dll, SAMLIB.dll, davclnt.dll
WISPTIS.EXE 2256 ntdll.dll, kernel32.dll, msvcrt.dll,
ATL.DLL, ADVAPI32.dll, RPCRT4.dll,
GDI32.dll, USER32.dll, MSVCP60.dll,
HID.DLL,
ole32.dll, OLEAUT32.dll, SETUPAPI.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
SynTPFcs.dll,
VERSION.dll, msctfime.ime, wtsapi32.dll,
WINSTA.dll, CLBCATQ.DLL, COMRes.dll,
msi.dll, TPCPS.DLL, tbhook.dll
HomeSite+.exe 2912 ntdll.dll, kernel32.dll, user32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
oleaut32.dll, MSVCRT.DLL, OLE32.DLL,
mpr.dll, version.dll, comctl32.dll,
imm32.dll, winspool.drv, shell32.dll,
SHLWAPI.dll, comdlg32.dll, winmm.dll,
ssce5332.dll, msvfw32.dll, avifil32.dll,
MSACM32.dll, LPK.DLL, USP10.dll,
comctl32.dll, SYNCOR11.DLL, SynTPFcs.dll,
msctfime.ime, olepro32.dll, CLBCATQ.DLL,
COMRes.dll, wddx_com.dll, xmlparse.dll,
xmltok.dll, MSVCP60.dll, SXS.DLL,
Msimtf.dll, MSCTF.dll, tbhook.dll,
XceedZip.dll, DCIMAN32.DLL, SETUPAPI.dll,
appHelp.dll, cscui.dll, CSCDLL.dll,
ntshrui.dll, ATL.DLL, NETAPI32.dll,
USERENV.dll, TSHook.dll, drprov.dll,
ntlanman.dll, NETUI0.dll, NETUI1.dll,
NETRAP.dll, SAMLIB.dll, davclnt.dll,
wiashext.dll, gdiplus.dll, WININET.dll,
CRYPT32.dll, MSASN1.dll, sti.dll,
CFGMGR32.dll, cfvalidator.dll,
cfmlvalidator.dll, lang_cfml.dll,
xml_datagrove.dll, MFC42.DLL, CFRegExp.dll
putty.exe 292 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, USER32.dll, GDI32.dll,
COMCTL32.dll, comdlg32.dll, SHLWAPI.dll,
msvcrt.dll, SHELL32.dll, WSOCK32.dll,
WS2_32.dll, WS2HELP.dll, IMM32.DLL,
LPK.DLL,
USP10.dll, comctl32.dll, SynTPFcs.dll,
VERSION.dll, msctfime.ime, ole32.dll,
Msimtf.dll, MSCTF.dll, tbhook.dll,
mswsock.dll, DNSAPI.dll, winrnr.dll,
WLDAP32.dll, rasadhlp.dll, wshtcpip.dll
putty.exe 3740 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, USER32.dll, GDI32.dll,
COMCTL32.dll, comdlg32.dll, SHLWAPI.dll,
msvcrt.dll, SHELL32.dll, WSOCK32.dll,
WS2_32.dll, WS2HELP.dll, IMM32.DLL,
LPK.DLL,
USP10.dll, comctl32.dll, SynTPFcs.dll,
VERSION.dll, msctfime.ime, ole32.dll,
Msimtf.dll, MSCTF.dll, mswsock.dll,
wshtcpip.dll, tbhook.dll
iexplore.exe 1116 ntdll.dll, kernel32.dll, msvcrt.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, SHLWAPI.dll, SHDOCVW.dll,
IMM32.DLL, LPK.DLL, USP10.dll,
comctl32.dll,
SHELL32.dll, comctl32.dll, ole32.dll,
SynTPFcs.dll, VERSION.dll, BROWSEUI.dll,
browselc.dll, appHelp.dll, CLBCATQ.DLL,
OLEAUT32.dll, COMRes.dll, msctfime.ime,
Msimtf.dll, MSCTF.dll, UxTheme.dll,
WININET.dll, CRYPT32.dll, MSASN1.dll,
Secur32.dll, cscui.dll, CSCDLL.dll,
SETUPAPI.dll, AcroIEHelper.dll,
SDHelper.dll, olepro32.dll, NavShExt.dll,
ccTrust.dll, MSVCP60.dll, ATL.DLL,
urlmon.dll, shdoclc.dll, mlang.dll,
wsock32.dll, WS2_32.dll, WS2HELP.dll,
mswsock.dll, wshtcpip.dll, RASAPI32.DLL,
rasman.dll, NETAPI32.dll, TAPI32.dll,
rtutils.dll, WINMM.dll, SYNCOR11.DLL,
sensapi.dll, msi.dll, SXS.DLL, tbhook.dll,
USERENV.dll, rsaenh.dll, DNSAPI.dll,
winrnr.dll, WLDAP32.dll, rasadhlp.dll,
mshtml.dll, MSLS31.DLL, msohev.dll,
MPR.dll,
sti.dll, CFGMGR32.dll, wdmaud.drv,
msacm32.drv, MSACM32.dll, midimap.dll,
scrauth.dll, ScrBlock.dll, wintrust.dll,
IMAGEHLP.dll, cryptnet.dll, jscript.dll,
mshtmled.dll, iepeers.dll, WINSPOOL.DRV,
imgutil.dll, pngfilt.dll, ACTXPRXY.DLL,
Flash.ocx, comdlg32.dll, SwSupport.dll,
ddrawex.dll, DDRAW.dll, DCIMAN32.dll,
Msxml3.dll, drprov.dll, ntlanman.dll,
NETUI0.dll, NETUI1.dll, NETRAP.dll,
SAMLIB.dll, davclnt.dll, vbscript.dll
tasklist.exe 1344 ntdll.dll, kernel32.dll, msvcrt.dll,
ADVAPI32.dll, RPCRT4.dll, USER32.dll,
GDI32.dll, MPR.dll, ole32.dll,
OLEAUT32.dll,
Secur32.dll, WS2_32.dll, WS2HELP.dll,
framedyn.dll, NETAPI32.dll, DBGHELP.dll,
VERSION.dll, IMM32.DLL, LPK.DLL, USP10.dll,
SynTPFcs.dll, CLBCATQ.DLL, COMRes.dll,
wbemprox.dll, wbemcomn.dll, Winsta.dll,
wbemsvc.dll, fastprox.dll
wmiprvse.exe 2944 ntdll.dll, kernel32.dll, msvcrt.dll,
ADVAPI32.dll, RPCRT4.dll, USER32.dll,
GDI32.dll, FastProx.dll, wbemcomn.dll,
OLEAUT32.dll, OLE32.DLL, NCObjAPI.DLL,
IMM32.DLL, LPK.DLL, USP10.dll, CLBCATQ.DLL,
COMRes.dll, VERSION.dll, wbemprox.dll,
wbemsvc.dll, wmiutils.dll, cimwin32.dll,
framedyn.dll, Secur32.dll, SETUPAPI.dll,
WTSAPI32.dll, WINSTA.dll, CFGMGR32.DLL,
WMI.DLL, NETAPI32.DLL

 

[Ramesh [MVP]]

That's a huge log

BTW, did you also check Event Viewer for failed services or warning entries? Another option, perform a clean boot.

--
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

TaskList log as requested. Note that I was running some applications at the
time (IE, HomeSite, Putty etc):

 

[Chris Cox]

Like I said, I was running some stuff ;-)

I've had a look at the Event Viewer, and the following error happens every
boot:

"Automatic certificate enrollment for local system failed to contact the
active directory (0x8007054b). The specified domain either does not exist or
could not be contacted.
Enrollment will not be performed."

No other warnings or errors.

That's a huge log

BTW, did you also check Event Viewer for failed services or warning entries?
Another option, perform a clean boot.

--
Ramesh - Microsoft MVP
Windows XP Shell/User
http://www.mvps.org/sramesh2k

AumHa VSOP: http://www.aumha.org

TaskList log as requested. Note that I was running some applications at the
time (IE, HomeSite, Putty etc):