PDA

View Full Version : Question about 2 HijackThis O9 entries



Rednose
2007-02-05, 09:57
Hi all :)

Yesterday I found 2 HijackThis O9 entries on my system.

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

I would say they are dead entries, so I could delete them. But I asked myself what is xpnetdiag.exe ? Although I am ill, and have to be in bed :red: I googled a little bit, and it seems to be a valid Microsoft tool. And also other people have HijackThis logs with this dead entries. Now my question is : Is xpnetdiag.exe in Windows by default ? ( I guess not, but I am not sure ... ) And if not, where do those 2 dead entries came from ?

As always I hope to learn something from you :)

Greetz, Red.

Zenobia
2007-02-05, 11:24
Sorry to hear you are ill.I hope you get well soon. :)

Please see:
http://www.castlecops.com/o9list-190.html
Hijackthis also shows File Missing in my own log for
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
However,xpnetdiag.exe is present at C:\WINDOWS\network diagnostic on my computer.So,I don't think you should delete those entries just because Hijackthis shows the (file missing) entry beside those two 09 items.If memory serves me correctly,Hijackthis sometimes incorrectly shows (file missing) beside some 09 items.
Same as msgrapp.dll,an 018 item.From my log:
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
You will see on this page it is often incorrectly reported as missing.
http://www.castlecops.com/o18list-83.html

Rednose
2007-02-05, 11:36
Zenobia sweethart :flowers:

You are right :) I didn't search for the file on my system, but indeed it is there. Thank you for clearing this up :)

Kisses to you :wub:, Red.

Zenobia
2007-02-05, 12:46
You're welcome. :)