unresolved issues

[Pearlie]

Hi, my computer has these 3 things wrong (says the spybot scan) and they keep re-occuring scan after scan. If anyone knows how to fix these problems (manually, or not) please help. they are:
windows\schedLGU.txt
and 2 MSDirectinput items:
HKEY_users\S-1-5-21-2424800976-64447763-916131506-1005\software\microsoft\
directinput\mostrecentapplication\name!=
and same path.....\most recent application\Id!=

after scanning, I get a popup that says 3 problems could not be fixed, and a prompt to restart. When I restart, I get the same results. Anyone have any ideas? Thanks.

[md usa spybot fan]

Please post a log of the actual detections you are getting. To do that:

• Run another scan.
• When the scan completes, right click on the results list, select "Copy results to clipboard".
• Then paste (Ctrl+V) those results to a new post in this thread.

Thanks

***************

Added with edit:

This may be a start to an explanation:

re: SchedLgU.txt

• Why can't I remove the Sti_Trace.log (or SchedLgU.txt) file?
  http://www.safer-networking.org/inde...e=faq&detail=6

[noel-pr7]

also, Pearlie, tell us what version of Windows you are using on your computer when you had this problem so we can help you further.

md usa spybot fan, about the Sti_Trace.log file, I can get rid of this file off my WinXP computer easily. Open the Services MMC applet [services.msc], right-click on the Windows Image Acquisition [WIA] service and choose Stop. after the WIA service has been shut down, I can now safely delete the Sti_trace.log file from the Windows folder. If the WIA service is reloaded on a Win2000/XP/2003/Vista machine, it will create a new but empty Sti_trace.log file. it really doesnt bother me that much. I'd keep the WIA service on, especially when working with downloading pictures from a scanner or digital camera.

About the SchedLGU.txt file; that file is created by the Task Scheduler service, if it was loaded at startup. Again, open the Services MMC box, locate the Task Scheduler service, right-click on it and select Stop to shut it down and the schedlgu.txt file can now be deleted. I'd set the Task Scheduler service to load manually instead of automatic which makes Task Scheduler load at startup.

these tips I mentioned are assumed a user has Windows 2000, XP, Server 2003 or Vista installed.

If Spybot continues to detect the schedlgu.txt and sti_trace.log files, make Spybot ignore those detections as noted at the site md usa spybot fan mentioned.

[Pearlie]

Here's the list, I'm running on XP pro I really appreciate your help, thanks again.

Common Dialogs: History (8 files) (Registry key, fixed)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU

Log: Activity: SchedLgU.Txt (Backup file, fixing failed)
C:\WINDOWS\SchedLgU.Txt

Log: Shutdown: System32\wbem\logs\wbemess.log (Backup file, fixed)
C:\WINDOWS\System32\wbem\logs\wbemess.log

Log: Shutdown: System32\wbem\logs\wmiprov.log (Backup file, fixed)
C:\WINDOWS\System32\wbem\logs\wmiprov.log

MS Media Player: Anonymous ID (Registry change, fixed)
HKEY_USERS\S-1-5-21-2424800976-64447763-916131506-1005\Software\Microsoft\MediaPlayer\Preferences\SendUserGUID!=B=0

MS Direct3D: Most recent application (Registry change, fixed)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Direct3D\MostRecentApplication\Name!=

MS DirectDraw: Most recent application (Registry change, fixed)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name!=

MS DirectInput: Most recent application (Registry change, fixing failed)
HKEY_USERS\S-1-5-21-2424800976-64447763-916131506-1005\Software\Microsoft\DirectInput\MostRecentApplication\Name!=

MS DirectInput: Most recent application ID (Registry change, fixing failed)
HKEY_USERS\S-1-5-21-2424800976-64447763-916131506-1005\Software\Microsoft\DirectInput\MostRecentApplication\Id!=

MS Office 10.0 (Word): Recently used documents list (Registry value, fixed)
HKEY_USERS\S-1-5-21-2424800976-64447763-916131506-1005\Software\Microsoft\Office\10.0\Word\Data\Settings

Windows Explorer: User Assistant history IE (4 files) (Registry key, fixed)
HKEY_USERS\S-1-5-21-2424800976-64447763-916131506-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{5E6AB780-7743-11CF-A12B-00AA004AE837}\Count

Windows Explorer: User Assistant history files (24 files) (Registry key, fixed)
HKEY_USERS\S-1-5-21-2424800976-64447763-916131506-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count

Windows Explorer: Last visited history (3 files) (Registry key, fixed)
HKEY_USERS\S-1-5-21-2424800976-64447763-916131506-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedMRU

Windows Explorer: Recent file global history (Registry key, fixed)
HKEY_USERS\S-1-5-21-2424800976-64447763-916131506-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs

Windows Media SDK: Computer name (Registry change, fixed)
HKEY_USERS\S-1-5-21-2424800976-64447763-916131506-1005\Software\Microsoft\Windows Media\WMSDK\General\ComputerName!=ComputerName

Windows Media SDK: Unique ID (Registry change, fixed)
HKEY_USERS\S-1-5-21-2424800976-64447763-916131506-1005\Software\Microsoft\Windows Media\WMSDK\General\UniqueID!={00000000-0000-0000-0000-000000000000}

Windows Media SDK: Volume serial number (Registry value, fixed)
HKEY_USERS\S-1-5-21-2424800976-64447763-916131506-1005\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber

Cookie: Cookie (3) (Cookie, fixed)


Cache: Cache (53) (Cache, fixed)


Congratulations!: No immediate threats were found. ()



--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---

2005-05-31 blindman.exe (1.0.0.1)
2005-05-31 SpybotSD.exe (1.4.0.3)
2005-05-31 TeaTimer.exe (1.4.0.2)
2006-06-14 unins000.exe (51.41.0.0)
2005-05-31 Update.exe (1.4.0.0)
2007-01-15 advcheck.dll (1.2.1.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2007-01-02 Tools.dll (2.0.1.0)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2007-01-19 Includes\Cookies.sbi (*)
2006-12-08 Includes\Dialer.sbi (*)
2007-01-19 Includes\DialerC.sbi (*)
2006-11-24 Includes\Hijackers.sbi (*)
2007-01-19 Includes\HijackersC.sbi (*)
2006-10-27 Includes\Keyloggers.sbi (*)
2007-01-19 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2007-01-12 Includes\Malware.sbi (*)
2007-01-19 Includes\MalwareC.sbi (*)
2007-01-19 Includes\PUPS.sbi (*)
2007-01-19 Includes\PUPSC.sbi (*)
2007-01-19 Includes\Revision.sbi (*)
2006-12-08 Includes\Security.sbi (*)
2007-01-19 Includes\SecurityC.sbi (*)
2006-10-13 Includes\Spybots.sbi (*)
2007-01-19 Includes\SpybotsC.sbi (*)
2005-02-17 Includes\Tracks.uti (*)
2006-12-08 Includes\Trojans.sbi (*)
2007-01-19 Includes\TrojansC.sbi (*)