Is this too tough to figure out?

Dell INSPIRON 6000
February 8, 2009 at 09:31:49
Specs: Windows XP, Intel
I have tried to get answers on other forums.... dozens and dozens of "views" but no replies. I have posted HJT logs etc... but I am handcuffed by this issue.

Eset Internet Security discovered a virus and quarantined it. Required a restart.

After restart, an error box titled

- Unable To Locate Component

the error box also contained this information

This application has failed to start because mshbobjq.dll was not found. Re-installing the application may fix this problem

Popped up on re-start. I can click through the error boxes after a couple dozen times and get to Windows. I have lost use of most applications and cannot install any more. I get this error box opening anything on my computer; file folder application, browser etc...

I aslo tried to run the scan suggested by this forum. The error boxes contiually block the application. I tried to update Java as suggested and the error box about the .dll file still blocks the attempt. I have lost the use of google chrome and cannot re-install. I can't re-install anything. I can barely get Explorer to open if I click through enough boxes. I do have HijackThis on my computer if that helps...

Please, I don't have much time before I'm forced to buy another laptop to get back to work.

Thankyou in advance.

See More: Is this too tough to figure out?

Report •

February 8, 2009 at 10:27:22
you still have win xp cd by any chance?

go here:
and download process explorer, it doesn't need install but does need something like winzip to extract

close all programs and open process explorer and kill anything suspicious, google the ones you don't know about or post the names.
Hopefully this will allow opening/installing applications if there are no broken windows components
as for programs that don't work, go to:

those are portable applications (ie don't need install) made for usb, you can download and use them while you fix the broken ones.

make a hijackthis log and post it here

Report •

February 8, 2009 at 11:29:05
thanks for replying..

I don't have a Win CD. Dell's were not shipped with them when I bought mine - go figure.

I downloaded the Process Explorer file and ran it. I have no clue as to what should be killed so I haven't done anything after unzipping and running the file. I am still having the issue with the error box stating I am missing the "mshbobjq.dll" file when opening any application (including opening a new browser window).

Also, I lost my connection after doing this, had to re-start and edited this post to add that. Just noticed that ESET Insternet Security just dissappered from my tray.

I will respond to your instructions carefully and quickly.. thanks again.

Here is my HijackThis Log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:26:04 PM, on 2/8/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\AOL\1170558247\ee\AOLSoftware.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Kenny\Desktop\\ProcessExplorer\procexp.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files\Yontoo Layers Client for Internet Explorer\YontooIEClient.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [DLBUCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLBUtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1170558247\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: *
O15 - Trusted Zone: *
O15 - Trusted Zone: *
O15 - Trusted Zone: *
O15 - Trusted Zone: *
O15 - Trusted Zone: *
O15 - Trusted Zone: *
O15 - Trusted Zone: *
O15 - Trusted Zone: *
O15 - Trusted Zone: *
O15 - Trusted Zone: *
O15 - Trusted Zone: *
O15 - Trusted Zone: *
O15 - Trusted Zone: *
O15 - Trusted Zone: * (HKLM)
O15 - Trusted Zone: * (HKLM)
O15 - Trusted Zone: * (HKLM)
O15 - Trusted Zone: * (HKLM)
O15 - Trusted Zone: * (HKLM)
O15 - Trusted Zone: * (HKLM)
O15 - Trusted Zone: * (HKLM)
O15 - Trusted Zone: * (HKLM)
O15 - Trusted Zone: * (HKLM)
O15 - Trusted Zone: * (HKLM)
O15 - Trusted Zone: * (HKLM)
O15 - Trusted Zone: * (HKLM)
O15 - Trusted Zone: * (HKLM)
O15 - Trusted Zone: * (HKLM)
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) -
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) -
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) -
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) -
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) -
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) -
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) -
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) -
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) -
O16 - DPF: {6F750200-1362-4815-A476-88533DE61D0C} (Ofoto Upload Manager Class) -
O16 - DPF: {74C861A1-D548-4916-BC8A-FDE92EDFF62C} -
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) -
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) -
O16 - DPF: {9FC5238F-12C4-454F-B1B5-74599A21DE47} (Webshots Photo Uploader) -
O16 - DPF: {B1E2B96C-12FE-45E2-BEF1-44A219113CDD} (SABScanProcesses Class) -
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) -
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
O23 - Service: WLANKEEPER - IntelĀ® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

End of file - 11423 bytes

Report •

February 8, 2009 at 15:39:50

select anything starting with
O15 - Trusted Zone:
and fix it. Also, if you have a firewall, add those websites to the block list.

go to

its usually

open the file called HOSTS with wordpad
CTRL+F and type in one of the websites

if it finds it, it should like like this:

otherwise remove the IP address (to the left) and replace it with, repeat for the rest of the websites. If not found then skip this step.

go here:

and install this. It might help with the installation issue.
as for mshbobjq.dll, it might be associated with the virus, and box messages appear because it was removed. Open process explorer and go to find>find handle or dll
and type in the name and see if you can find it.
unfortunately everything else appears legit

Report •

Related Solutions

February 8, 2009 at 16:32:43
Thankyou for your instruction.

I followed your instructions and fixed the items in the "trusted zone" you suggested with HijackThis.

I also added those websites to my firewalls blocked addresseswithin Eset.

The hosts file do not show anything except ""

I followed the link to the windows installer and seems I have a newer version already installed.

I ran process explorer.. could not find the .dll in the running processes. What exactly is this file:


and why do I need it for every thing I try to do (including simple things such as opening notepad)?

I'm still getting the error and nothing opens properly.

This is what Eset found by the way, it's still in quarantine because it could not be deleted.


Thanks for your help.

Report •

February 8, 2009 at 18:57:23
glad to help
go to:

rightclick on the empty spot and 'Arrange Icons by'>Modified and look at the buttom of the list, look for a similar name to mshbobjq.dll.

try to go add/remove programs:
start>run and type "control"
and remove windows installer, if possible, then install it again. Any version would work, but newest is 4.5. If you can get the installer to work, it would help alot.

also you don't need this .dll file. Sometimes the virus attaches itself (a dll) to windows explorer (explorer.exe)or another windows application and when you delete the .dll file you start getting errors. Notepad and other applications run under explorer.exe which might be why you're getting the errors.

Report •

February 8, 2009 at 19:58:57

Add/Remove didn't show Windows Installer, showed Windows Installer Cleanup though. Was able to install Windows Installer 4.5 from the link you supplied.

Looked inside the folder, nothing similar to the file "mshbobjq.dll" I do however still see it quarantined in my security software. Should I restore it? It says it quarantined because of a trojan.

Everything still seems to be attached to this missing .dll file. I mean everything. All start up files, java, browser, installer...any and everything. Nothing can be clicked, opened, installed, run, etc... without this error box popping up multiple times.

On the other hand, aside from havig=ng to click through the error boxes, the laptop seems to be running faster.

What's next?

Report •

February 9, 2009 at 10:26:24
check to see if you can install anything
go to
start>run and type "msconfig"
go to Startup and make sure iexplore.exe is un ticked. If its not on the list then skip

ALso go to
start>run and type 'regsvr32 mshbobjq.dll /u'

restart your computer

Report •

February 9, 2009 at 14:28:32
I could get to msconfig. startup did not have iexplore.exe listed...

"ALso go to
start>run and type 'regsvr32 mshbobjq.dll /u'"

The results were another error box:

LoadLibrary("mshbobjq.dll") failed - The specified module could not be found.

I am still experiencing these error boxes constantly. What should I do with the quarantined files?

Report •

February 10, 2009 at 06:23:38
Should I post this issue on another forum? Is the error box unrelated to a virus?

Report •

February 10, 2009 at 09:01:30
Thanks for your attempts to help but I've come to the realization that my problem really is "too tough to figure out".

Unless some miracle happens I will be going Thursday to buy a new laptop. Hopefully I will find one cheap enough that I can afford and will have no issues. Maybe it's for the best.

Feel free to delete this thread since it won't be of help to anyone else. I realize this is a volenteer help forum so I thank you for your time. Good luck.

Report •

February 10, 2009 at 10:44:45
there is one last thing you could do
go here:

and download RegSeeker

it doesnt require installation but requires something like winzip to extract it.

open RegSeeker.exe, Choose CleanTheRegistery

choose all options and click OK.

when the scan is finished, click on 'select'
and 'select all'

click on 'action' select 'delete selected items' and when the message box appears click 'ok'

if this doesn't help then the only thing i can suggest is to get a windows xp cd and perform a repair (or full) installation.

good luck

Report •

Ask Question