Forum Home
Press F1
 
Thread ID: 67962 2006-04-11 23:23:00 XP Pro -Win Explorer jumps to Search mode BaldEd (5136) Press F1
Post ID Timestamp Content User
445825 2006-04-11 23:23:00 :help: XP Pro - Windows Explorer. If a root tree folder in the left pane has subfolders and the subfolders are shown in the right pane, when I double click the subfolder in the right pane Windows jumps straight to the "Search for Files/programs" routine instead of opening the subfolder!! :annoyed: I can only open the subfolders from the leftpane, which is a bit of a drag!

What/where are the settings to change this? Or does XP need to be reinstalled?

Any advice would be appreciated (within reason of course) ;)
BaldEd (5136)
445826 2006-04-12 00:22:00 Reinstalling Windows will work, BUT that is generaly a last resort, you might have some adware/spyware, where is Speedy when you need him? :lol:

Anyway Get hijackthis (www.merijn.org) from here (www.spywareinfo.com)

Unzip this file, then run it and click on scan and save a log. Copy and paste the log back in the forum.
The_End_Of_Reality (334)
445827 2006-04-13 09:41:00 Thanks for the reply .
Here's the log file you requested . I am a bit of a newbie at this game .



---------------------------------------------------------
Logfile of HijackThis v1 . 99 . 1
Scan saved at 8:36:35 p . m . , on 13/04/2006
Platform: Windows XP SP1 (WinNT 5 . 01 . 2600)
MSIE: Internet Explorer v6 . 00 SP1 (6 . 00 . 2800 . 1106)

Running processes:
C:\WINDOWS\System32\smss . exe
C:\WINDOWS\system32\winlogon . exe
C:\WINDOWS\system32\services . exe
C:\WINDOWS\system32\lsass . exe
C:\WINDOWS\system32\svchost . exe
C:\WINDOWS\System32\svchost . exe
C:\Program Files\Ahead\InCD\InCDsrv . exe
C:\WINDOWS\Explorer . EXE
C:\WINDOWS\system32\spoolsv . exe
C:\Program Files\Microsoft Works\WksSb . exe
C:\WINDOWS\SOINTGR . EXE
C:\Program Files\Java\jre1 . 5 . 0_01\bin\jusched . exe
C:\Program Files\Trend Micro\Internet Security 2005\pccguide . exe
C:\Program Files\Ahead\InCD\InCD . exe
C:\Program Files\Bluetooth Software\BTTray . exe
C:\Program Files\Common Files\DataViz\DvzIncMsgr . exe
C:\Program Files\EPSON\EPSON SMART PANEL for Scanner\EspMain . exe
C:\Program Files\GetRight\getright . exe
C:\Palm\Hotsync . exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem . exe
C:\Program Files\Sony Corporation\Picture Package\Picture Package Menu\SonyTray . exe
C:\Program Files\GetRight\getright . exe
C:\Program Files\Sony Corporation\Picture Package\Picture Package Applications\Residence . exe
C:\Program Files\WinZip\WZQKPICK . EXE
C:\PROGRA~1\BLUETO~1\BTSTAC~1 . EXE
C:\Program Files\Bluetooth Software\bin\btwdins . exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2 . exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom . exe
C:\WINDOWS\System32\svchost . exe
C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv . exe
C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw . exe
C:\Program Files\FireTrust\MailWasher Pro\MailWasher . exe
C:\Program Files\Outlook Express\msimn . exe
C:\Program Files\Messenger\msmsgs . exe
C:\Program Files\Mozilla Firefox\firefox . exe
C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy . exe
C:\unzipped\hijackthis\HijackThis . exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www . xtra . co . nz/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat

7 . 0\ActiveX\AcroIEHelper . dll
O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr . dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search &

Destroy\SDHelper . dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm . ocx
O4 - HKLM\ . . \Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud . exe
O4 - HKLM\ . . \Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb . exe /AllUsers
O4 - HKLM\ . . \Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect . exe
O4 - HKLM\ . . \Run: [SO5 Integrator Pass Two] C:\WINDOWS\SOINTGR . EXE
O4 - HKLM\ . . \Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1 . 5 . 0_01\bin\jusched . exe
O4 - HKLM\ . . \Run: [pccguide . exe] "C:\Program Files\Trend Micro\Internet Security 2005\pccguide . exe"
O4 - HKLM\ . . \Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck . exe
O4 - HKLM\ . . \Run: [InCD] C:\Program Files\Ahead\InCD\InCD . exe
O4 - HKCU\ . . \Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7 . 0\Reader\AdobeUpdateManager . exe AcRdB7_0_5

-reboot 1
O4 - Startup: ERUNT AutoBackup . lnk = C:\Program Files\ERUNT\AUTOBACK . EXE
O4 - Global Startup: Adobe Gamma Loader . lnk = ?
O4 - Global Startup: Adobe Reader Speed Launch . lnk = C:\Program Files\Adobe\Acrobat 7 . 0\Reader\reader_sl . exe
O4 - Global Startup: BTTray . lnk = ?
O4 - Global Startup: DataViz Inc Messenger . lnk = C:\Program Files\Common Files\DataViz\DvzIncMsgr . exe
O4 - Global Startup: EPSON SMART PANEL for Scanner . lnk = C:\Program Files\EPSON\EPSON SMART PANEL for

Scanner\EspMain . exe
O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2 . lnk =

C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV0 2 . EXE
O4 - Global Startup: GetRight - Tray Icon . lnk = C:\Program Files\GetRight\getright . exe
O4 - Global Startup: HotSync Manager . lnk = C:\Palm\Hotsync . exe
O4 - Global Startup: Microsoft Office . lnk = C:\Program Files\Microsoft Office\Office\OSA9 . EXE
O4 - Global Startup: Microsoft Works Calendar Reminders . lnk = ?
O4 - Global Startup: Picture Package Menu . lnk = ?
O4 - Global Startup: Picture Package VCD Maker . lnk = ?
O4 - Global Startup: WinZip Quick Pick . lnk = C:\Program Files\WinZip\WZQKPICK . EXE
O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload . htm
O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse . htm
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\Bluetooth Software\btsendto_ie_ctx . htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

Files\Java\jre1 . 5 . 0_01\bin\npjpi150_01 . dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

Files\Java\jre1 . 5 . 0_01\bin\npjpi150_01 . dll
O9 - Extra button: Researcher - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Common

Files\Microsoft Shared\Reference 2001\EROProj . dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related . htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} -

C:\WINDOWS\web\related . htm
O9 - Extra button: @btrez . dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Bluetooth

Software\btsendto_ie . htm
O9 - Extra 'Tools' menuitem: @btrez . dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program

Files\Bluetooth Software\btsendto_ie . htm
O9 - Extra button: iSiloX Clipper - {C86027A6-12A1-4298-B6EA-A42AC6EE6C7C} - C:\Program

Files\iSilo\iSiloX\iSiloXIE . dll (HKCU)
O9 - Extra 'Tools' menuitem: iSiloX Clipper . . . - {C86027A6-12A1-4298-B6EA-A42AC6EE6C7C} - C:\Program

Files\iSilo\iSiloX\iSiloXIE . dll (HKCU)
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc . - C:\Program Files\Bluetooth Software\bin\btwdins . exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program

Files\Common Files\EPSON\EBAPI\SAgent2 . exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv . exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Incorporated . -

C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom . exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated . -

C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv . exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc . -

C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw . exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc . -

C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy . exe
BaldEd (5136)
445828 2006-04-13 09:46:00 I don't whether this means anything but I note that there is an web address entry for xtra.co.nz, but xtra.co.nz hasn't been my ISP for a number of years now and I use Firefox as my default browser!
Cheers.
BaldEd (5136)
445829 2006-04-13 10:17:00 Yes BUT you have Internet Explorer installed and the home page for that is Xtra, you will see that if you open up IE.

I am also new with the HijackThis logs but.... here goes

to start with there doesn't look to be anything VERY bad but I will PM Speedy to take a look

O9 - Extra button: iSiloX Clipper - {C86027A6-12A1-4298-B6EA-A42AC6EE6C7C} - C:\Program Files\iSilo\iSiloX\iSiloXIE.dll (HKCU)

O9 - Extra 'Tools' menuitem: iSiloX Clipper... - {C86027A6-12A1-4298-B6EA-A42AC6EE6C7C} - C:\Program Files\iSilo\iSiloX\iSiloXIE.dll (HKCU)

These look a little suspect, what program is it?
The_End_Of_Reality (334)
445830 2006-04-13 16:07:00 If you are synching a Palm to your desktop, then that's the reason for the iSILO entry...I have it and I need it to synch my SONY Palm.... SurferJoe46 (51)
445831 2006-04-13 16:14:00 Your: MSIE: Internet Explorer v6 . 00 SP1 (6 . 00 . 2800 . 1106)

. . . . . . . . . . . is outta date . . . are you only up to SP-1?

I suggest SP-2 for security and it might just repair your problem .

Eveything else looks OK for your HJT results . . . a few little things, but nothing that stands out .

Get Windows Update . . . . er . . . up to date and resubmit another HJT scan for further testing . . . OK?
SurferJoe46 (51)
445832 2006-04-13 16:24:00 *everything SurferJoe46 (51)
445833 2006-04-13 21:31:00 Yer, the log doesnt look too bad to me.

Run hijackthis again tick these entries and tick fix checked.

O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe - Update here (www.java.com:80)

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
Speedy Gonzales (78)
445834 2006-04-13 21:42:00 Go to Start > Run then type in the following (or better still, copy and paste):

regsvr32 /i shell32

Press Enter then see if the problem has gone.

Let us know how you get on.
FoxyMX (5)
1 2