Page 8 of 16 FirstFirst ... 456789101112 ... LastLast
Results 71 to 80 of 156

Thread: Please help get rid of smitfraud remnants

  1. #71
    Member
    Join Date
    Dec 2006
    Posts
    81

    Default

    Unable to copy themeui.dll into System32 even under safe mode. I receive the same error message as described in my previous post above. Weird.

  2. #72
    Member
    Join Date
    Dec 2006
    Posts
    81

    Default

    I found dllcache after I selected the VIEW tab and found HIDDEN FILES AND FOLDERS under FILES and FOLDERS,

    and clicked the radio button for SHOW HIDDEN FILES AND FOLDERS

    A N D

    deselected (unchecked) HIDE PROTECTED OPERATING SYSTEM FILES

    BUT

    No themeui.dll in the folder.

  3. #73
    Member
    Join Date
    Dec 2006
    Posts
    81

    Default

    Below are the processes running with explorer.exe. I post this in case you might want to have a look.


    ========================= ====== =============================================
    System Idle Process 0 ƒ/“
    System 4 ƒ/“
    smss.exe 640 ntdll.dll
    csrss.exe 1344 ntdll.dll, CSRSRV.dll, basesrv.dll,
    winsrv.dll, GDI32.dll, KERNEL32.dll,
    USER32.dll, sxs.dll, ADVAPI32.dll,
    RPCRT4.dll, Apphelp.dll, VERSION.dll
    winlogon.exe 1368 ntdll.dll, kernel32.dll, ADVAPI32.dll,
    RPCRT4.dll, AUTHZ.dll, msvcrt.dll,
    CRYPT32.dll, USER32.dll, GDI32.dll,
    MSASN1.dll, NDdeApi.dll, PROFMAP.dll,
    NETAPI32.dll, USERENV.dll, PSAPI.DLL,
    REGAPI.dll, Secur32.dll, SETUPAPI.dll,
    VERSION.dll, WINSTA.dll, WINTRUST.dll,
    IMAGEHLP.dll, WS2_32.dll, WS2HELP.dll,
    IMM32.DLL, MSGINA.dll, SHELL32.dll,
    SHLWAPI.dll, COMCTL32.dll, ODBC32.dll,
    comdlg32.dll, comctl32.dll, odbcint.dll,
    SHSVCS.dll, sfc.dll, sfc_os.dll, ole32.dll,
    Apphelp.dll, msctfime.ime, WINSCARD.DLL,
    WTSAPI32.dll, sxs.dll, uxtheme.dll,
    WINMM.dll, cscdll.dll, lbtserv.dll, HID.DLL,
    MSIMG32.dll, WINSPOOL.DRV, OLEAUT32.dll,
    NTMARTA.DLL, WLDAP32.dll, SAMLIB.dll,
    lbtintw.dll, BtCoreIf.dll, MFC42.DLL,
    MFC42LOC.DLL, rsaenh.dll, WlNotify.dll,
    MPR.dll, msv1_0.dll, iphlpapi.dll,
    cscui.dll, MPRAPI.dll, ACTIVEDS.dll,
    adsldpc.dll, ATL.DLL, rtutils.dll,
    xpsp2res.dll, COMRes.dll, CLBCATQ.DLL,
    wdmaud.drv, msacm32.drv, MSACM32.dll,
    midimap.dll
    services.exe 1416 ntdll.dll, kernel32.dll, msvcrt.dll,
    ADVAPI32.dll, RPCRT4.dll, USER32.dll,
    GDI32.dll, USERENV.dll, SCESRV.dll,
    AUTHZ.dll, umpnpmgr.dll, WINSTA.dll,
    NETAPI32.dll, NCObjAPI.DLL, MSVCP60.dll,
    ShimEng.dll, AcAdProc.dll, IMM32.DLL,
    secur32.dll, Apphelp.dll, VERSION.dll,
    eventlog.dll, WS2_32.dll, WS2HELP.dll,
    PSAPI.DLL, wtsapi32.dll
    lsass.exe 1428 ntdll.dll, kernel32.dll, ADVAPI32.dll,
    RPCRT4.dll, LSASRV.dll, MPR.dll, USER32.dll,
    GDI32.dll, MSASN1.dll, msvcrt.dll,
    NETAPI32.dll, NTDSAPI.dll, DNSAPI.dll,
    WS2_32.dll, WS2HELP.dll, WLDAP32.dll,
    Secur32.dll, SAMLIB.dll, SAMSRV.dll,
    cryptdll.dll, ShimEng.dll, AcGenral.DLL,
    WINMM.dll, ole32.dll, OLEAUT32.dll,
    MSACM32.dll, VERSION.dll, SHELL32.dll,
    SHLWAPI.dll, USERENV.dll, UxTheme.dll,
    IMM32.DLL, comctl32.dll, comctl32.dll,
    msprivs.dll, kerberos.dll, msv1_0.dll,
    iphlpapi.dll, netlogon.dll, w32time.dll,
    MSVCP60.dll, schannel.dll, CRYPT32.dll,
    wdigest.dll, rsaenh.dll, scecli.dll,
    SETUPAPI.dll, ipsecsvc.dll, AUTHZ.dll,
    oakley.DLL, WINIPSEC.DLL, pstorsvc.dll,
    vetredir.dll, mswsock.dll, hnetcfg.dll,
    isafeif.dll, wshtcpip.dll, psbase.dll,
    dssenh.dll
    svchost.exe 1572 ntdll.dll, kernel32.dll, ADVAPI32.dll,
    RPCRT4.dll, ShimEng.dll, AcGenral.DLL,
    USER32.dll, GDI32.dll, WINMM.dll, ole32.dll,
    msvcrt.dll, OLEAUT32.dll, MSACM32.dll,
    VERSION.dll, SHELL32.dll, SHLWAPI.dll,
    USERENV.dll, UxTheme.dll, IMM32.DLL,
    comctl32.dll, comctl32.dll, NTMARTA.DLL,
    WLDAP32.dll, SAMLIB.dll, rpcss.dll,
    Secur32.dll, WS2_32.dll, WS2HELP.dll,
    xpsp2res.dll, WTSAPI32.dll, WINSTA.dll,
    NETAPI32.dll, msv1_0.dll, iphlpapi.dll,
    CLBCATQ.DLL, COMRes.dll, Apphelp.dll,
    termsrv.dll, ICAAPI.dll, SETUPAPI.dll,
    WINTRUST.dll, CRYPT32.dll, MSASN1.dll,
    IMAGEHLP.dll, AUTHZ.dll, mstlsapi.dll,
    ACTIVEDS.dll, adsldpc.dll, ATL.DLL,
    REGAPI.dll, rsaenh.dll
    svchost.exe 1632 ntdll.dll, kernel32.dll, ADVAPI32.dll,
    RPCRT4.dll, ShimEng.dll, AcGenral.DLL,
    USER32.dll, GDI32.dll, WINMM.dll, ole32.dll,
    msvcrt.dll, OLEAUT32.dll, MSACM32.dll,
    VERSION.dll, SHELL32.dll, SHLWAPI.dll,
    USERENV.dll, UxTheme.dll, IMM32.DLL,
    comctl32.dll, comctl32.dll, rpcss.dll,
    Secur32.dll, WS2_32.dll, WS2HELP.dll,
    xpsp2res.dll, rsaenh.dll, mswsock.dll,
    vetredir.dll, hnetcfg.dll, isafeif.dll,
    wshtcpip.dll, DNSAPI.dll, iphlpapi.dll,
    winrnr.dll, WLDAP32.dll, rasadhlp.dll,
    CLBCATQ.DLL, COMRes.dll
    svchost.exe 1672 ntdll.dll, kernel32.dll, ADVAPI32.dll,
    RPCRT4.dll, ShimEng.dll, AcGenral.DLL,
    USER32.dll, GDI32.dll, WINMM.dll, ole32.dll,
    msvcrt.dll, OLEAUT32.dll, MSACM32.dll,
    VERSION.dll, SHELL32.dll, SHLWAPI.dll,
    USERENV.dll, UxTheme.dll, IMM32.DLL,
    comctl32.dll, comctl32.dll, NTMARTA.DLL,
    WLDAP32.dll, SAMLIB.dll, xpsp2res.dll,
    shsvcs.dll, WINSTA.dll, NETAPI32.dll,
    rsaenh.dll, dhcpcsvc.dll, DNSAPI.dll,
    WS2_32.dll, WS2HELP.dll, iphlpapi.dll,
    Secur32.dll, wzcsvc.dll, rtutils.dll,
    WMI.dll, CRYPT32.dll, MSASN1.dll,
    WTSAPI32.dll, ESENT.dll, ATL.DLL,
    rastls.dll, CRYPTUI.dll, WINTRUST.dll,
    IMAGEHLP.dll, WININET.dll, Normaliz.dll,
    iertutil.dll, MPRAPI.dll, ACTIVEDS.dll,
    adsldpc.dll, SETUPAPI.dll, RASAPI32.dll,
    rasman.dll, TAPI32.dll, SCHANNEL.dll,
    WinSCard.dll, raschap.dll, msv1_0.dll,
    CLBCATQ.DLL, COMRes.dll, MSVCP60.dll,
    WZCSAPI.DLL, schedsvc.dll, NTDSAPI.dll,
    MSIDLE.DLL, audiosrv.dll, wkssvc.dll,
    qmgr.dll, MPR.dll, SHFOLDER.dll,
    WINHTTP.dll, vetredir.dll, mswsock.dll,
    hnetcfg.dll, isafeif.dll, wshtcpip.dll,
    cryptsvc.dll, certcli.dll, dmserver.dll,
    ersvc.dll, es.dll, pchsvc.dll, hidserv.dll,
    HID.DLL, srvsvc.dll, winspool.drv,
    netman.dll, netshell.dll, credui.dll,
    seclogon.dll, sens.dll, srsvc.dll,
    POWRPROF.dll, trkwks.dll, SXS.DLL,
    w32time.dll, wmisvc.dll, VSSAPI.DLL,
    browser.dll, wuauserv.dll, ipnathlp.dll,
    AUTHZ.dll, wuaueng.dll, ADVPACK.dll,
    Cabinet.dll, mspatcha.dll, sfc.dll,
    sfc_os.dll, comsvcs.dll, colbact.DLL,
    MTXCLU.DLL, WSOCK32.dll, CLUSAPI.DLL,
    RESUTILS.DLL, wscsvc.dll, msi.dll,
    RASDLG.dll, upnp.dll, SSDPAPI.dll,
    wbemcomn.dll, wbemcore.dll, esscli.dll,
    FastProx.dll, wbemsvc.dll, wmiutils.dll,
    repdrvfs.dll, wmiprvsd.dll, NCObjAPI.DLL,
    wbemess.dll, netcfgx.dll, rasmans.dll,
    WINIPSEC.DLL, ncprov.dll, msxml3.dll,
    Apphelp.dll, wups.dll, tapisrv.dll,
    PSAPI.DLL, dssenh.dll, rasadhlp.dll,
    rastapi.dll, unimdm.tsp, uniplat.dll,
    kmddsp.tsp, winrnr.dll, ndptsp.tsp,
    ipconf.tsp, h323.tsp, hidphone.tsp,
    rasppp.dll, ntlsapi.dll, kerberos.dll,
    cryptdll.dll, urlmon.dll, mlang.dll,
    xmlprovi.dll

  4. #74
    Member
    Join Date
    Dec 2006
    Posts
    81

    Default

    InCDsrv.exe 1696 ntdll.dll, kernel32.dll, MSVCR71.dll,
    USER32.dll, GDI32.dll, ADVAPI32.dll,
    RPCRT4.dll, MSVCP71.dll, IMM32.DLL,
    AdvrCntr2.dll, WININET.dll, msvcrt.dll,
    SHLWAPI.dll, Normaliz.dll, iertutil.dll,
    comdlg32.dll, COMCTL32.dll, SHELL32.dll,
    WINSPOOL.DRV, ole32.dll, OLEAUT32.dll,
    VERSION.dll, comctl32.dll, DriveLocker.dll,
    uxtheme.dll
    svchost.exe 1864 ntdll.dll, kernel32.dll, ADVAPI32.dll,
    RPCRT4.dll, ShimEng.dll, AcGenral.DLL,
    USER32.dll, GDI32.dll, WINMM.dll, ole32.dll,
    msvcrt.dll, OLEAUT32.dll, MSACM32.dll,
    VERSION.dll, SHELL32.dll, SHLWAPI.dll,
    USERENV.dll, UxTheme.dll, IMM32.DLL,
    comctl32.dll, comctl32.dll, dnsrslvr.dll,
    DNSAPI.dll, WS2_32.dll, WS2HELP.dll,
    iphlpapi.dll, vetredir.dll, mswsock.dll,
    hnetcfg.dll, isafeif.dll, wshtcpip.dll
    svchost.exe 1968 ntdll.dll, kernel32.dll, ADVAPI32.dll,
    RPCRT4.dll, ShimEng.dll, AcGenral.DLL,
    USER32.dll, GDI32.dll, WINMM.dll, ole32.dll,
    msvcrt.dll, OLEAUT32.dll, MSACM32.dll,
    VERSION.dll, SHELL32.dll, SHLWAPI.dll,
    USERENV.dll, UxTheme.dll, IMM32.DLL,
    comctl32.dll, comctl32.dll, NTMARTA.DLL,
    WLDAP32.dll, SAMLIB.dll, xpsp2res.dll,
    lmhsvc.dll, iphlpapi.dll, WS2_32.dll,
    WS2HELP.dll, webclnt.dll, WININET.dll,
    Normaliz.dll, iertutil.dll, Secur32.dll,
    ssdpsrv.dll, hnetcfg.dll, CLBCATQ.DLL,
    COMRes.dll, vetredir.dll, mswsock.dll,
    isafeif.dll, wshtcpip.dll
    spoolsv.exe 412 ntdll.dll, kernel32.dll, ADVAPI32.dll,
    RPCRT4.dll, GDI32.dll, USER32.dll,
    msvcrt.dll, ShimEng.dll, AcGenral.DLL,
    WINMM.dll, ole32.dll, OLEAUT32.dll,
    MSACM32.dll, VERSION.dll, SHELL32.dll,
    SHLWAPI.dll, USERENV.dll, UxTheme.dll,
    IMM32.DLL, comctl32.dll, comctl32.dll,
    SPOOLSS.DLL, WS2_32.dll, WS2HELP.dll,
    DNSAPI.dll, iphlpapi.dll, rasadhlp.dll,
    localspl.dll, Secur32.dll, sfc_os.dll,
    WINTRUST.dll, CRYPT32.dll, MSASN1.dll,
    IMAGEHLP.dll, winspool.drv, netapi32.dll,
    AdobePDF.dll, MSVCR71.dll, adistres.dll,
    cnbjmon.dll, bthcrp.dll, WidcommSdk.dll,
    wbtapi.dll, CFGMGR32.dll, setupapi.dll,
    msi.dll, MFC42.DLL, MSVCP60.dll,
    MFC42LOC.DLL, HPBMMON.DLL, hpdomon.dll,
    pjlmon.dll, usbmon.dll, HPBHealr.dll,
    hpzlnt10.dll, mdimon.dll, NgSharedPort.dll,
    WSOCK32.dll, tcpmon.dll, HPPRN05.DLL,
    mdippr.dll, mswsock.dll, winrnr.dll,
    WLDAP32.dll, win32spl.dll, NETRAP.dll,
    NTDSAPI.dll, CLBCATQ.DLL, COMRes.dll,
    xpsp2res.dll, inetpp.dll
    guard.exe 588 ƒ/“
    btwdins.exe 664 ntdll.dll, kernel32.dll, WS2_32.dll,
    msvcrt.dll, WS2HELP.dll, ADVAPI32.dll,
    RPCRT4.dll, USER32.dll, GDI32.dll,
    ole32.dll, OLEAUT32.dll, IMM32.DLL,
    uxtheme.dll, xpsp2res.dll, rsaenh.dll,
    SHELL32.dll, SHLWAPI.dll, comctl32.dll,
    comctl32.dll, CRYPT32.dll, MSASN1.dll,
    HID.DLL, WINTRUST.dll, IMAGEHLP.dll,
    Secur32.dll
    MDM.EXE 724 ntdll.dll, kernel32.dll, ADVAPI32.dll,
    RPCRT4.dll, ole32.dll, GDI32.dll,
    USER32.dll, msvcrt.dll, OLEAUT32.dll,
    SHELL32.dll, SHLWAPI.dll, VERSION.dll,
    IMM32.DLL, comctl32.dll, comctl32.dll,
    psapi.dll, xpsp2res.dll, CLBCATQ.DLL,
    COMRes.dll
    nvsvc32.exe 824 ntdll.dll, kernel32.dll, USER32.dll,
    GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
    USERENV.dll, msvcrt.dll, POWRPROF.dll,
    IMM32.DLL, wtsapi32.dll, WINSTA.dll,
    NETAPI32.dll, SHLWAPI.dll, ole32.dll,
    COMCTL32.dll, OLEAUT32.dll, comctl32.dll,
    nvapi.dll, UxTheme.dll, msctfime.ime,
    WINTRUST.dll, CRYPT32.dll, MSASN1.dll,
    IMAGEHLP.dll, secur32.dll, NTMARTA.DLL,
    WLDAP32.dll, SAMLIB.dll, msv1_0.dll,
    WS2_32.dll, WS2HELP.dll, iphlpapi.dll,
    Apphelp.dll, VERSION.dll
    StarWindService.exe 904 ntdll.dll, kernel32.dll, ADVAPI32.dll,
    RPCRT4.dll, WS2_32.dll, msvcrt.dll,
    WS2HELP.dll, USER32.dll, GDI32.dll,
    IMM32.DLL, mswsock.dll, DNSAPI.dll,
    iphlpapi.dll, winrnr.dll, WLDAP32.dll,
    rasadhlp.dll, vetredir.dll, hnetcfg.dll,
    isafeif.dll, wshtcpip.dll
    svchost.exe 928 ntdll.dll, kernel32.dll, ADVAPI32.dll,
    RPCRT4.dll, ShimEng.dll, AcGenral.DLL,
    USER32.dll, GDI32.dll, WINMM.dll, ole32.dll,
    msvcrt.dll, OLEAUT32.dll, MSACM32.dll,
    VERSION.dll, SHELL32.dll, SHLWAPI.dll,
    USERENV.dll, UxTheme.dll, IMM32.DLL,
    comctl32.dll, comctl32.dll, wiaservc.dll,
    CFGMGR32.dll, setupapi.DLL, mscms.dll,
    WINSPOOL.DRV, WINSTA.dll, NETAPI32.dll,
    xpsp2res.dll, CLBCATQ.DLL, COMRes.dll,
    WINTRUST.dll, CRYPT32.dll, MSASN1.dll,
    IMAGEHLP.dll, CNQU71.DLL, CNQL1208.DLL,
    actxprxy.dll
    ULCDRSvr.exe 1060 ntdll.dll, kernel32.dll, ADVAPI32.dll,
    RPCRT4.dll
    vsmon.exe 1196 ƒ/“

  5. #75
    Member
    Join Date
    Dec 2006
    Posts
    81

    Default

    explorer.exe 2004 ntdll.dll, kernel32.dll, msvcrt.dll,
    ADVAPI32.dll, RPCRT4.dll, GDI32.dll,
    USER32.dll, SHLWAPI.dll, SHELL32.dll,
    ole32.dll, OLEAUT32.dll, BROWSEUI.dll,
    SHDOCVW.dll, CRYPT32.dll, MSASN1.dll,
    CRYPTUI.dll, WINTRUST.dll, IMAGEHLP.dll,
    NETAPI32.dll, WININET.dll, Normaliz.dll,
    iertutil.dll, WLDAP32.dll, VERSION.dll,
    UxTheme.dll, ShimEng.dll, AcGenral.DLL,
    WINMM.dll, MSACM32.dll, USERENV.dll,
    IMM32.DLL, comctl32.dll, comctl32.dll,
    msctfime.ime, appHelp.dll, CLBCATQ.DLL,
    COMRes.dll, cscui.dll, CSCDLL.dll,
    themeui.dll, Secur32.dll, MSIMG32.dll,
    xpsp2res.dll, actxprxy.dll, msutb.dll,
    MSCTF.dll, MLANG.dll, LINKINFO.dll,
    ntshrui.dll, ATL.DLL, SAMLIB.dll,
    ieframe.dll, PSAPI.DLL, urlmon.dll,
    mshtml.dll, msls31.dll, ws2_32.dll,
    WS2HELP.dll, RASAPI32.dll, rasman.dll,
    TAPI32.dll, rtutils.dll, SETUPAPI.dll,
    NETSHELL.dll, credui.dll, iphlpapi.dll,
    msi.dll, mslbui.dll, MPR.dll, drprov.dll,
    ntlanman.dll, NETUI0.dll, NETUI1.dll,
    NETRAP.dll, davclnt.dll, rsaenh.dll,
    lgscroll.dll, shellexecutehook.dll,
    msv1_0.dll, sensapi.dll, msimtf.dll,
    sptip.dll, OLEACC.dll, MSVCP60.dll,
    SPGRMR.DLL, SKCHUI.DLL, WINSTA.dll,
    webcheck.dll, stobject.dll, BatMeter.dll,
    POWRPROF.dll, WTSAPI32.dll,
    WPDShServiceObj.dll, WINHTTP.dll,
    btncopy.dll, mydocs.dll, wdmaud.drv,
    msacm32.drv, midimap.dll,
    PortableDeviceTypes.dll,
    PortableDeviceApi.dll, WZCSAPI.DLL,
    mlfhook.dll, SXS.DLL, mshtmled.dll,
    NeroDigitalExt.dll, MFC71.DLL, MSVCR71.dll,
    MSVCP71.dll, ZShext.dll, PDFShell.dll,
    nvcpl.dll, comdlg32.dll, WINSPOOL.DRV,
    NVRSEL.DLL, NTMARTA.DLL, nvapi.dll,
    nvshell.dll, browselc.dll
    Winpower.exe 856 ntdll.dll, kernel32.dll, ADVAPI32.dll,
    RPCRT4.dll, USER32.dll, GDI32.dll,
    IMM32.DLL, version.dll
    javaw.exe 976 ntdll.dll, kernel32.dll, ADVAPI32.dll,
    RPCRT4.dll, USER32.dll, GDI32.dll,
    MSVCRT.dll, IMM32.DLL, jvm.dll, WINMM.dll,
    hpi.dll, verify.dll, java.dll, zip.dll,
    Secur32.dll, SHELL32.DLL, SHLWAPI.dll,
    comctl32.dll, comctl32.dll, awt.dll,
    WINSPOOL.DRV, ole32.dll, TrayIcon12.dll,
    uxtheme.dll, msctfime.ime, fontmanager.dll,
    nvoglnt.dll, Apphelp.dll, VERSION.dll
    hpcmpmgr.exe 1092 ntdll.dll, kernel32.dll, USER32.dll,
    GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
    SHELL32.dll, msvcrt.dll, SHLWAPI.dll,
    ole32.dll, OLEAUT32.dll, HPVCR70.dll,
    IMM32.DLL, comctl32.dll, comctl32.dll,
    Cabinet.dll, uxtheme.dll, rsaenh.dll,
    WINTRUST.dll, CRYPT32.dll, MSASN1.dll,
    IMAGEHLP.dll, Secur32.dll, CLBCATQ.DLL,
    COMRes.dll, VERSION.dll, msctfime.ime,
    MSXML4.dll, WININET.dll, Normaliz.dll,
    iertutil.dll, ws2_32.dll, WS2HELP.dll,
    urlmon.dll, xpsp2res.dll, msi.dll, SXS.DLL,
    MSCTF.dll, lgscroll.dll, mlfhook.dll
    hpztsb10.exe 1132 ntdll.dll, kernel32.dll, USER32.dll,
    GDI32.dll, WINSPOOL.DRV, msvcrt.dll,
    RPCRT4.dll, ADVAPI32.dll, SHELL32.dll,
    SHLWAPI.dll, COMCTL32.dll, IMM32.DLL,
    comctl32.dll, uxtheme.dll, HPZR3210.dll,
    msctfime.ime, ole32.dll, lgscroll.dll,
    MSCTF.dll
    zlclient.exe 1916 ƒ/“
    jusched.exe 2064 ntdll.dll, kernel32.dll, ADVAPI32.dll,
    RPCRT4.dll, GDI32.dll, USER32.dll,
    WININET.dll, msvcrt.dll, SHLWAPI.dll,
    Normaliz.dll, iertutil.dll, ole32.dll,
    SHELL32.dll, OLEAUT32.dll, MSVCR71.dll,
    IMM32.DLL, comctl32.dll, comctl32.dll,
    uxtheme.dll
    SOUNDMAN.EXE 2124 ntdll.dll, kernel32.dll, USER32.dll,
    GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
    SHELL32.dll, msvcrt.dll, SHLWAPI.dll,
    SETUPAPI.dll, WINMM.dll, IMM32.DLL,
    comctl32.dll, comctl32.dll, uxtheme.dll,
    msctfime.ime, ole32.dll, WINTRUST.dll,
    CRYPT32.dll, MSASN1.dll, IMAGEHLP.dll,
    lgscroll.dll, MSCTF.dll, mslbui.dll
    ctfmon.exe 2148 ntdll.dll, kernel32.dll, msvcrt.dll,
    ADVAPI32.dll, RPCRT4.dll, USER32.dll,
    GDI32.dll, MSCTF.dll, MSUTB.dll,
    ShimEng.dll, AcGenral.DLL, WINMM.dll,
    ole32.dll, OLEAUT32.dll, MSACM32.dll,
    VERSION.dll, SHELL32.dll, SHLWAPI.dll,
    USERENV.dll, UxTheme.dll, IMM32.DLL,
    comctl32.dll, msctfime.ime, lgscroll.dll
    BTTray.exe 2332 ntdll.dll, kernel32.dll, CFGMGR32.dll,
    setupapi.dll, msvcrt.dll, ADVAPI32.dll,
    RPCRT4.dll, GDI32.dll, USER32.dll,
    wbtapi.dll, msi.dll, SHLWAPI.dll, MFC42.DLL,
    ole32.dll, OLEAUT32.dll, VERSION.dll,
    MSVCP60.dll, RASAPI32.dll, rasman.dll,
    WS2_32.dll, WS2HELP.dll, NETAPI32.dll,
    TAPI32.dll, rtutils.dll, WINMM.dll,
    btosif.dll, BtBalloon.dll, SHELL32.dll,
    comdlg32.dll, COMCTL32.dll, IMM32.DLL,
    MFC42LOC.DLL, btrez.dll, CSH.dll,
    uxtheme.dll, MSCTF.dll, CLBCATQ.DLL,
    COMRes.dll, xpsp2res.dll, SXS.DLL,
    lgscroll.dll

  6. #76
    Member
    Join Date
    Dec 2006
    Posts
    81

    Default

    BTSTAC~1.EXE 2368 ntdll.dll, kernel32.dll, btins.dll, msi.dll,
    ADVAPI32.dll, RPCRT4.dll, GDI32.dll,
    USER32.dll, msvcrt.dll, CFGMGR32.dll,
    setupapi.dll, SHLWAPI.dll, TAPI32.dll,
    rtutils.dll, WINMM.dll, MFC42.DLL,
    SHELL32.dll, ole32.dll, VERSION.dll,
    MSVCP60.dll, btosif.dll, WS2_32.dll,
    WS2HELP.dll, OLEAUT32.dll, iphlpapi.dll,
    BtAudioHelper.dll, IMM32.DLL, comctl32.dll,
    MFC42LOC.DLL, comctl32.dll, btrez.dll,
    CSH.dll, comdlg32.dll, rsaenh.dll,
    CRYPT32.dll, MSASN1.dll, CLBCATQ.DLL,
    COMRes.dll, xpsp2res.dll, uxtheme.dll,
    MSCTF.dll, msctfime.ime, Wtsapi32.dll,
    WINSTA.dll, NETAPI32.dll, SXS.DLL,
    lgscroll.dll, WINTRUST.dll, IMAGEHLP.dll,
    wdmaud.drv, msacm32.drv, MSACM32.dll,
    midimap.dll
    SetPoint.exe 2384 ntdll.dll, kernel32.dll, VERSION.dll,
    lgscroll.dll, USER32.dll, GDI32.dll,
    KEMUI.dll, MSIMG32.dll, comdlg32.dll,
    SHLWAPI.dll, ADVAPI32.dll, RPCRT4.dll,
    msvcrt.dll, COMCTL32.dll, SHELL32.dll,
    WINSPOOL.DRV, OLEAUT32.dll, ole32.dll,
    gdiplus.dll, oledlg.dll, IMM32.DLL,
    uxtheme.dll, MSCTF.dll, msctfime.ime,
    MacroBT.dll, WINMM.dll, KEMHook.dll,
    MacroCore.dll, lbtserv.dll, HID.DLL,
    SETUPAPI.dll, NTMARTA.DLL, WLDAP32.dll,
    SAMLIB.dll, lbtintw.dll, BtCoreIf.dll,
    WS2_32.dll, WS2HELP.dll, MFC42.DLL,
    MFC42LOC.DLL, KhalApi.dll, mlfhook.dll
    KHALMNPR.EXE 2488 ntdll.dll, kernel32.dll, SETUPAPI.dll,
    msvcrt.dll, ADVAPI32.dll, RPCRT4.dll,
    GDI32.dll, USER32.dll, IMM32.DLL,
    KHALAPI.DLL, uxtheme.dll, MSCTF.dll,
    lgscroll.dll, msctfime.ime, ole32.dll,
    wtsapi32.dll, WINSTA.dll, NETAPI32.dll,
    lbtserv.dll, HID.DLL, MSIMG32.dll,
    comdlg32.dll, SHLWAPI.dll, COMCTL32.dll,
    SHELL32.dll, WINSPOOL.DRV, OLEAUT32.dll,
    comctl32.dll, NTMARTA.DLL, WLDAP32.dll,
    SAMLIB.dll, lbtintw.dll, BtCoreIf.dll,
    WS2_32.dll, WS2HELP.dll, MFC42.DLL,
    MFC42LOC.DLL, cfgmgr32.dll, KHALITCH.DLL,
    KHALMW.DLL, KHALHPP.DLL, WINMM.dll,
    WINTRUST.dll, CRYPT32.dll, MSASN1.dll,
    IMAGEHLP.dll
    wlancfg5.exe 2664 ntdll.dll, kernel32.dll, WlanDll.dll,
    ExtWLANconfig.dll, odSupp_M.dll,
    CRYPT32.dll, ADVAPI32.dll, RPCRT4.dll,
    msvcrt.dll, USER32.dll, GDI32.dll,
    MSASN1.dll, CRYPTUI.dll, WINTRUST.dll,
    IMAGEHLP.dll, OLEAUT32.dll, ole32.dll,
    NETAPI32.dll, WININET.dll, SHLWAPI.dll,
    Normaliz.dll, iertutil.dll, WLDAP32.dll,
    VERSION.dll, WS2_32.dll, WS2HELP.dll,
    iphlpapi.dll, SETUPAPI.dll, MFC42.DLL,
    comdlg32.dll, COMCTL32.dll, SHELL32.dll,
    WINSPOOL.DRV, oledlg.dll, OLEPRO32.DLL,
    IMM32.DLL, comctl32.dll, MFC42LOC.DLL,
    ICMP.DLL, uxtheme.dll, MSCTF.dll,
    lgscroll.dll, msctfime.ime, tiwlnapi.dll,
    Secur32.dll, RICHED32.DLL, RICHED20.dll,
    mslbui.dll
    monitor.exe 2252 ntdll.dll, kernel32.dll, ADVAPI32.dll,
    RPCRT4.dll, USER32.dll, GDI32.dll,
    IMM32.DLL, version.dll
    isafe.exe 2832 ntdll.dll, kernel32.dll, WS2_32.dll,
    msvcrt.dll, WS2HELP.dll, ADVAPI32.dll,
    RPCRT4.dll, NTMARTA.DLL, USER32.dll,
    GDI32.dll, WLDAP32.dll, ole32.dll,
    SAMLIB.dll, IMM32.DLL, ISafeProduct.dll,
    arclib.dll, vete.dll, isafeif.dll,
    vetredir.dll, mswsock.dll, hnetcfg.dll,
    wshtcpip.dll
    javaw.exe 2844 ntdll.dll, kernel32.dll, ADVAPI32.dll,
    RPCRT4.dll, USER32.dll, GDI32.dll,
    MSVCRT.dll, IMM32.DLL, jvm.dll, WINMM.dll,
    hpi.dll, verify.dll, java.dll, zip.dll,
    Secur32.dll, SHELL32.DLL, SHLWAPI.dll,
    comctl32.dll, comctl32.dll, net.dll,
    WSOCK32.dll, WS2_32.dll, WS2HELP.dll,
    mswsock.dll, DNSAPI.dll, winrnr.dll,
    WLDAP32.dll, rasadhlp.dll, vetredir.dll,
    hnetcfg.dll, isafeif.dll, wshtcpip.dll,
    Apphelp.dll, VERSION.dll, jspWin.dll
    alg.exe 2912 ntdll.dll, kernel32.dll, msvcrt.dll,
    ATL.DLL, USER32.dll, GDI32.dll,
    ADVAPI32.dll, RPCRT4.dll, ole32.dll,
    OLEAUT32.dll, WSOCK32.dll, WS2_32.dll,
    WS2HELP.dll, MSWSOCK.DLL, ShimEng.dll,
    AcGenral.DLL, WINMM.dll, MSACM32.dll,
    VERSION.dll, SHELL32.dll, SHLWAPI.dll,
    USERENV.dll, UxTheme.dll, IMM32.DLL,
    comctl32.dll, comctl32.dll, CLBCATQ.DLL,
    COMRes.dll, xpsp2res.dll, hnetcfg.dll,
    vetredir.dll, isafeif.dll, wshtcpip.dll
    firefox.exe 3756 ntdll.dll, kernel32.dll, js3250.dll,
    nspr4.dll, ADVAPI32.dll, RPCRT4.dll,
    WSOCK32.dll, WS2_32.dll, msvcrt.dll,
    WS2HELP.dll, WINMM.dll, USER32.dll,
    GDI32.dll, xpcom_core.dll, plc4.dll,
    plds4.dll, SHELL32.dll, SHLWAPI.dll,
    ole32.dll, VERSION.dll, smime3.dll,
    nss3.dll, softokn3.dll, ssl3.dll,
    xpcom_compat.dll, comdlg32.dll,
    COMCTL32.dll, OLEAUT32.dll, WINSPOOL.DRV,
    IMM32.DLL, uxtheme.dll, mlfhook.dll,
    MSCTF.dll, lgscroll.dll, msctfime.ime,
    SETUPAPI.dll, CLBCATQ.DLL, COMRes.dll,
    myspell.dll, vetredir.dll, mswsock.dll,
    hnetcfg.dll, isafeif.dll, wshtcpip.dll,
    iphlpapi.dll, jar50.dll, DNSAPI.dll,
    winrnr.dll, WLDAP32.dll, Apphelp.dll,
    msimtf.dll, xpsp2res.dll, freebl3.dll,
    nssckbi.dll, spellchk.dll, rasadhlp.dll,
    msimg32.dll, mslbui.dll, CRYPT32.dll,
    MSASN1.dll, mlang.dll, WINTRUST.dll,
    IMAGEHLP.dll, wdmaud.drv, msacm32.drv,
    MSACM32.dll, midimap.dll

  7. #77
    Member
    Join Date
    Dec 2006
    Posts
    81

    Default

    mantispm.exe 3852 ntdll.dll, kernel32.dll, COMCTL32.dll,
    ADVAPI32.dll, RPCRT4.dll, GDI32.dll,
    USER32.dll, VERSION.dll, WS2_32.dll,
    msvcrt.dll, WS2HELP.dll, SHELL32.dll,
    SHLWAPI.dll, crsrpt.dll, DBGHELP.dll,
    ole32.dll, OLEAUT32.dll, MSVCP70.dll,
    MSVCR70.dll, WININET.dll, Normaliz.dll,
    iertutil.dll, IMM32.DLL, comctl32.dll,
    Secur32.dll, uxtheme.dll, MSCTF.dll,
    lgscroll.dll, mbzaenu.dll, msctfime.ime,
    RASAPI32.dll, rasman.dll, NETAPI32.dll,
    TAPI32.dll, rtutils.dll, WINMM.dll,
    USERENV.dll, msv1_0.dll, iphlpapi.dll,
    rsaenh.dll, sensapi.dll, mswsock.dll,
    rasadhlp.dll, DNSAPI.dll, winrnr.dll,
    WLDAP32.dll, urlmon.dll, mlfhook.dll,
    mslbui.dll, vetredir.dll, hnetcfg.dll,
    isafeif.dll, wshtcpip.dll
    wpRMI.exe 3868 ntdll.dll, kernel32.dll, ADVAPI32.dll,
    RPCRT4.dll, USER32.dll, GDI32.dll,
    IMM32.DLL, version.dll
    javaw.exe 1012 ntdll.dll, kernel32.dll, ADVAPI32.dll,
    RPCRT4.dll, USER32.dll, GDI32.dll,
    MSVCRT.dll, IMM32.DLL, jvm.dll, WINMM.dll,
    hpi.dll, verify.dll, java.dll, zip.dll,
    Secur32.dll, SHELL32.DLL, SHLWAPI.dll,
    comctl32.dll, comctl32.dll, net.dll,
    WSOCK32.dll, WS2_32.dll, WS2HELP.dll,
    vetredir.dll, mswsock.dll, hnetcfg.dll,
    isafeif.dll, wshtcpip.dll, DNSAPI.dll,
    winrnr.dll, WLDAP32.dll, rasadhlp.dll
    cmd.exe 244 ntdll.dll, kernel32.dll, msvcrt.dll,
    USER32.dll, GDI32.dll, ShimEng.dll,
    AcGenral.DLL, ADVAPI32.dll, RPCRT4.dll,
    WINMM.dll, ole32.dll, OLEAUT32.dll,
    MSACM32.dll, VERSION.dll, SHELL32.dll,
    SHLWAPI.dll, USERENV.dll, UxTheme.dll,
    IMM32.DLL, comctl32.dll, comctl32.dll,
    Apphelp.dll
    tasklist.exe 2184 ntdll.dll, kernel32.dll, msvcrt.dll,
    ADVAPI32.dll, RPCRT4.dll, USER32.dll,
    GDI32.dll, MPR.dll, ole32.dll, OLEAUT32.dll,
    Secur32.dll, WS2_32.dll, WS2HELP.dll,
    framedyn.dll, NETAPI32.dll, DBGHELP.dll,
    VERSION.dll, ShimEng.dll, AcGenral.DLL,
    WINMM.dll, MSACM32.dll, SHELL32.dll,
    SHLWAPI.dll, USERENV.dll, UxTheme.dll,
    IMM32.DLL, comctl32.dll, comctl32.dll,
    mlfhook.dll, MSCTF.dll, lgscroll.dll,
    xpsp2res.dll, CLBCATQ.DLL, COMRes.dll,
    wbemprox.dll, wbemcomn.dll, Winsta.dll,
    wbemsvc.dll, fastprox.dll, MSVCP60.dll,
    NTDSAPI.dll, DNSAPI.dll, WLDAP32.dll
    wmiprvse.exe 3164 ntdll.dll, kernel32.dll, msvcrt.dll,
    ADVAPI32.dll, RPCRT4.dll, USER32.dll,
    GDI32.dll, wbemcomn.dll, OLEAUT32.dll,
    ole32.dll, FastProx.dll, MSVCP60.dll,
    NTDSAPI.dll, DNSAPI.dll, WS2_32.dll,
    WS2HELP.dll, WLDAP32.dll, NETAPI32.dll,
    Secur32.dll, NCObjAPI.DLL, ShimEng.dll,
    AcGenral.DLL, WINMM.dll, MSACM32.dll,
    VERSION.dll, SHELL32.dll, SHLWAPI.dll,
    USERENV.dll, UxTheme.dll, IMM32.DLL,
    comctl32.dll, comctl32.dll, xpsp2res.dll,
    CLBCATQ.DLL, COMRes.dll, wbemprox.dll,
    wbemsvc.dll, wmiutils.dll, cimwin32.dll,
    framedyn.dll, SETUPAPI.dll, WTSAPI32.dll,
    WINSTA.dll, CFGMGR32.DLL, WMI.DLL

  8. #78
    Member
    Join Date
    Dec 2006
    Posts
    81

    Default

    I also noticed that I cannot run sfc/scannow

  9. #79
    Member
    Join Date
    Dec 2006
    Posts
    81

    Default

    stupid me. I had to leave space between the words. However it can't run properly. It asks for the WinXPSP2 CD. I insert and I get a message that it is incorrect.

  10. #80
    Esteemed Security Expert: Emeritus
    Join Date
    Feb 2006
    Posts
    367

    Default

    Let's try this. Go into system32 and right click on themeui.dll

    Click on rename. Rename it as oldthemeui.dll


    See if that does it.

    It asks for the WinXPSP2 CD. I insert and I get a message that it is incorrect
    Sometimes there's a registry entry preventing the CD from being recognized.

    HERE:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

    If you are comfortable in the registry, go to start>run and type regedit
    Press enter.

    Go to this key:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

    Highlight Winlogon in the left pane.

    Look in the right pane for this value:
    Allocatecdroms

    Double click on allocatecdroms
    Change the value data to 0


    Do the same for this value:
    allocatedasd

    Close the registry.

    I'm not sure if you need a restart to take effect. Give it a try.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •