Computing.Net > Forums > Security and Virus > Unable to access CTRL PNL (Global D

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Click here to start participating now! Also, check out the New User Guide.

Unable to access CTRL PNL (Global D

Reply to Message Icon

Name: Jesse
Date: January 24, 2004 at 17:48:54 Pacific
OS: Win ME
CPU/Ram: ?
Comment:

Global Dialer was loaded on my computer and has been reeking havoc ever since. I am unable to get access to my control panel and various other programs on my comp. I've read other posts suggesting ways to fix the problem but all required a disk, which I dont have. Is there any other way to fix it?
Global Dialer was deleted but every so often it will re-load itself on my comp, how can I fix that.
Here is my logfile, and I'm running Windows ME. Any help would be greatly appreciated!!


Logfile of HijackThis v1.97.7
Scan saved at 6:16:49 PM, on 1/24/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.exe
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.exe
C:\WINDOWS\SYSTEM\MSTASK.exe
C:\WINDOWS\SYSTEM\SCARDSVR.exe
C:\PROGRAM FILES\STOPZILLA!\SZNTSVC.exe
C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHSERV.exe
C:\WINDOWS\SYSTEM\RESTORE\STMGR.exe
C:\WINDOWS\SYSTEM\RPCSS.exe
C:\WINDOWS\TASKMON.exe
C:\WINDOWS\SYSTEM\SYSTRAY.exe
C:\WINDOWS\SYSTEM\WMIEXE.exe
C:\WINDOWS\SYSTEM\HIDSERV.exe
C:\WINDOWS\PCTVOICE.exe
C:\PROGRAM FILES\COMPAQ\DIGITAL DASHBOARD\CPQMLDET.exe
C:\COMPAQ\EAKDRV\STARTDRV.exe
C:\COMPAQ\EAKDRV\EAKDRV.exe
C:\COMPAQ\EAKDRV\EAUSBKBD.exe
C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHMAISV.exe
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\WORKS SHARED\WKCALREM.exe
C:\WINDOWS\SYSTEM\DDHELP.exe
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.exe
C:\WINDOWS\EXPLORER.exe
C:\WINDOWS\SYSTEM\PSTORES.exe
C:\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\JLGII05Z\HIJACKTHIS[1].exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?p...=5.5&ar=msnhome
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN\YCOMP5_3_12_0.DLL
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O2 - BHO: (no name) - {E3215F20-3212-11D6-9F8B-00D0B743919D} - C:\WINDOWS\SYSTEM\StopzillaBHO.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN\YCOMP5_3_12_0.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [Hidserv] Hidserv.exe run
O4 - HKLM\..\Run: [PCTVOICE] pctvoice.exe
O4 - HKLM\..\Run: [WCOLOREAL] C:\Program Files\COMPAQ\COLOREAL\COLOREAL.exe
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Digital Dashboard] C:\Program Files\Compaq\Digital Dashboard\CPQMLDET.exe
O4 - HKLM\..\Run: [CPQEASYACC] C:\Compaq\eakdrv\STARTDRV.exe
O4 - HKLM\..\Run: [EACLEAN] C:\Program Files\Compaq\Easy Access Button Support\eaclean.exe
O4 - HKLM\..\Run: [CpqBootPerfDb] C:\Cpqs\Scom\CpqBootPerfDb.exe
O4 - HKLM\..\Run: [Openwares LiveUpdate] C:\Program Files\LiveUpdate\LiveUpdate.exe
O4 - HKLM\..\Run: [STOPzilla] "C:\Program Files\STOPzilla!\Stopzilla.exe" /autorun
O4 - HKLM\..\Run: [Winhost] C:\WINDOWS\winh.exe
O4 - HKLM\..\Run: [iefeatures] C:\WINDOWS\SYSTEM\IEFEATURES.exe
O4 - HKLM\..\Run: [ashMaiSv] C:\PROGRA~1\ALWILS~1\AVAST4\ashmaisv.exe
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\SYGATE\SPF\SMC.exe -startgui
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [ScardSvr] C:\WINDOWS\SYSTEM\ScardSvr.exe
O4 - HKLM\..\RunServices: [STOPzilla Service] C:\PROGRAM FILES\STOPZILLA!\SZNTSVC.exe
O4 - HKLM\..\RunServices: [avast!] C:\Program Files\Alwil Software\Avast4\ashServ.exe
O4 - HKLM\..\RunServices: [SmcService] C:\PROGRAM FILES\SYGATE\SPF\SMC.exe
O4 - HKCU\..\Run: [Shareaza] "C:\PROGRAM FILES\SHAREAZA\SHAREAZA.exe" -tray
O4 - HKCU\..\Run: [AIM] C:\PROGRAM FILES\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [MoneyAgent] "c:\Program Files\Microsoft Money\System\Money Express.exe"
O4 - HKCU\..\Run: [MoneyStartUp] c:\Program Files\Microsoft Money\System\Money Startup.exe
O4 - HKCU\..\Run: [jik0rpww5o] C:\WINDOWS\FGTUMOK7VW.exe
O4 - HKCU\..\Run: [549oibau22] C:\WINDOWS\H2L1SBC3ED.exe
O4 - Startup: Microsoft Works Calendar Reminders.lnk = C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: MSN Messenger Service (HKLM)
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwa...ash/swflash.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/...7984.4463888889
O16 - DPF: {CA034DCC-A580-4333-B52F-15F98C42E04C} (Downloader Class) - https://www.stopzilla.com/_download/Auto_In...ller/dwnldr.cab
O16 - DPF: {F5C90925-ABBF-4475-88F5-8622B452BA9E} (Compaq System Data Class) - http://atwnt333.external.hp.com/bus-nacons...er/SysQuery.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinstc.cab




Sponsored Link
Ads by Google

Response Number 1
Name: Greg20161
Date: January 24, 2004 at 18:25:20 Pacific
Reply:

im using ME too Jesse
got bigtime probs too
i can get to the control panel but wont let me access the windows setup
ill be watching for the answer too
Greg


0

Response Number 2
Name: Jesse
Date: January 24, 2004 at 18:37:53 Pacific
Reply:

Greg,
Has Global Dialer been installed on your computer? Is so have you been able to totally get rid of it?
Hopefully we'll be able to fix this problem!!


0

Response Number 3
Name: Imp
Date: January 24, 2004 at 19:04:44 Pacific
Reply:

Hello Jesse,
Try and run the "SFC" procedure of windows system to determine if you have corrupted or damaged files :
Just go to "Start", then "run", type "SFC" and follow the procedure, be ready to insert your Win ME CDrom if requested....
Windows will scan all your regitry and will attempt to repair it....


0

Response Number 4
Name: Jesse
Date: January 24, 2004 at 22:35:51 Pacific
Reply:

That's part of the problem, I cracked the
CD-Rom awhile back. Is there any other way to repair the file without a disk?
I tried to run SFC and got an error message saying "windows cannot find SFC".
Also, when I try to open certain programs I get a message saying "Not a valid Win32 Application".
I can't figure it out!!


0

Response Number 5
Name: Dog
Date: January 25, 2004 at 01:40:24 Pacific
Reply:

SFC is not part of Windows ME, or at least it disappeared from my system when ME was installed.

Dog


0

Related Posts

See More



Response Number 6
Name: Dog
Date: January 25, 2004 at 01:51:55 Pacific
Reply:

I'm not 100% sure but it looks like you have peper. Download and run
Peper Removal
and see if it gets rid of
O4 - HKCU\..\Run:[jik0rpww5o]C:\WINDOWS\FGTUMOK7VW.exe
O4 - HKCU\..\Run:549oibau22]C:\WINDOWS\H2L1SBC3ED.exe
these two lines in particular. It's a start.

HTH
Dog


0

Sponsored Link
Ads by Google
Reply to Message Icon

Golden Palace Casino, Sys... system32 folder+internet ...



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Unable to access CTRL PNL (Global D

Unable to access web correctly www.computing.net/answers/security/unable-to-access-web-correctly/18486.html

Unable to access secure websites www.computing.net/answers/security/unable-to-access-secure-websites/14787.html

unable to access secure sites www.computing.net/answers/security/unable-to-access-secure-sites/15373.html