[IMissXp]

[img:d614b88efd]http://i173.photobuc...oto/problem.jpg:evil: I have windows vista, everything has been working fine up until 2 weeks ago. For some reason everytime I try to run a program I get the error message "... is not a valid Win32 application." These were all applications that used to work correctly. I cant uninstall anything I cant install anything.For some reason the programs run fine in Safe Mode:?, I tried a system restore for 2 weeks ago in safe mode and the problem goes no where. I've tried virus scanners, they detect nothing. I just dont know what else to do. I dont want to have to use my computer in safe mode. The computer is less than 2 months oldHere is the HiJackThis Log, I hope this can help someone help me.Logfile of Trend Micro HijackThis v2.0.0 (BETA)Scan saved at 7:57:56 PM, on 4/6/2007Platform: Windows Vista (WinNT 6.00.1904)Boot mode: NormalRunning processes:C:Windowssystem32Dwm.exeC:WindowsExplorer.EXEC:Program FilesCommon FilesRealUpdateOBrealsched.exeC:Program FilesSynapticsSynTPSynTPEnh.exeC:Windowssttray.exeC:WindowsSystem32igfxpers.exeC:Program FilesDellMediaDirectPCMService.exeC:Program FilesMcAfeeMSKmskagent.exeC:Program FilesCommon FilesInstallShieldUpdateServiceissch.exeC:WindowsSystem32igfxtray.exeC:WindowsSystem32hkcmd.exeC:Program FilesSyncrosoftPOSH2Ocledx.exeC:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exeC:Program FilesWindows Sidebarsidebar.exeC:Windowsehomeehtray.exeC:Program FilesDellSupportDSAgnt.exeC:Program FilesGoogleGoogle Desktop SearchGoogleDesktopIndex.exeC:Program FilesWIDCOMMBluetooth SoftwareBTTray.exeC:Program FilesDigital Line DetectDLG.exeC:Windowsehomeehmsas.exeC:Program FilesDellQuickSetquickset.exeC:Program FilesWindows MailWinMail.exeC:Program FilesGoogleGoogle Desktop SearchGoogleDesktopCrawl.exec:PROGRA~1mcafee.comagentmcagent.exec:Program FilesWIDCOMMBluetooth SoftwareBtStackServer.exeC:Windowssystem32taskeng.exeC:Windowssystem32wbemunsecapp.exeC:Program FilesInternet Exploreriexplore.exec:program filesmcafeemscmcuimgr.exeC:UsersChampAppDataLocalMicrosoftWindowsTemporary Internet FilesContent.IE5E6M3W3PSHiJackThisv2[1].exeR1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft....?LinkId=54896R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,DefaultSearchURL = http://go.microsoft....?LinkId=54896R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft....?LinkId=54896R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft....?LinkId=69157R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch = R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title = Internet Explorer provided by DellR0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = O1 - Hosts: ::1 localhostO2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dllO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:Program FilesJavajre1.6.0binssv.dllO2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:program filesmcafeevirusscanscriptcl.dllO2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:program filesgooglegoogletoolbar1.dllO2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:Program FilesBAEBAE.dllO3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:program filesgooglegoogletoolbar1.dllO4 - HKLM..Run: [Windows Defender] %ProgramFiles%Windows DefenderMSASCui.exe -hideO4 - HKLM..Run: [TkBellExe] "C:Program FilesCommon FilesRealUpdateOBrealsched.exe" -osbootO4 - HKLM..Run: [SynTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exeO4 - HKLM..Run: [SigmatelSysTrayApp] sttray.exeO4 - HKLM..Run: [Persistence] C:Windowssystem32igfxpers.exeO4 - HKLM..Run: [PCMService] "C:Program FilesDellMediaDirectPCMService.exe"O4 - HKLM..Run: [MskAgentexe] C:Program FilesMcAfeeMSKMskAgent.exeO4 - HKLM..Run: [ISUSScheduler] "C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe" -startO4 - HKLM..Run: [ISUSPM Startup] C:PROGRA~1COMMON~1INSTAL~1UPDATE~1ISUSPM.exe -startupO4 - HKLM..Run: [IgfxTray] C:Windowssystem32igfxtray.exeO4 - HKLM..Run: [HotKeysCmds] C:Windowssystem32hkcmd.exeO4 - HKLM..Run: [H2O] C:Program FilesSyncroSoftPosH2Ocledx.exeO4 - HKLM..Run: [Google Desktop Search] "C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe" /startupO4 - HKLM..Run: [ECenter] c:dellE-CenterEULALauncher.exeO4 - HKLM..Run: [Corel Photo Downloader] C:Program FilesCorelCorel Snapfire PlusPhotoDownloader.exeO4 - HKCU..Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenterO4 - HKCU..Run: [Sidebar] C:Program FilesWindows Sidebarsidebar.exe /autoRunO4 - HKCU..Run: [ehTray.exe] C:WindowsehomeehTray.exeO4 - HKCU..Run: [DellSupport] "C:Program FilesDellSupportDSAgnt.exe" /startupO4 - HKCU..Run: [AIM] C:Program FilesAIMaim.exe -cnetwait.odlO4 - Global Startup: Adobe Reader Speed Launch.lnk = C:Program FilesAdobeAcrobat 7.0Readerreadersl.exeO4 - Global Startup: Bluetooth.lnk = ?O4 - Global Startup: Digital Line Detect.lnk = C:Program FilesDigital Line DetectDLG.exeO4 - Global Startup: QuickSet.lnk = ?O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:PROGRA~1MICROS~3OFFICE11EXCEL.EXE/3000O8 - Extra context menu item: Send image to &Bluetooth Device... - c:Program FilesWIDCOMMBluetooth Softwarebtsendtoiectx.htmO8 - Extra context menu item: Send page to &Bluetooth Device... - c:Program FilesWIDCOMMBluetooth Softwarebtsendtoie.htmO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:Program FilesJavajre1.6.0binnpjpi160.dllO9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:Program FilesJavajre1.6.0binnpjpi160.dllO9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~3OFFICE11REFIEBAR.DLLO9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:Program FilesAIMaim.exeO9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:Program FilesWIDCOMMBluetooth Softwarebtsendtoie.htmO9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:Program FilesWIDCOMMBluetooth Softwarebtsendtoie.htmO13 - Gopher Prefix: O16 - DPF: {700EF03F-A472-4D26-8ACB-300F4D04FD96} (Recovery ActiveX Control Module) - https://www.lojackfo...b/testoc.cabO20 - AppInitDLLs: C:PROGRA~1GoogleGOOGLE~1GOEC62~1.DLLO22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:Windowssystem32browseui.dllO23 - Service: DSBrokerService - Unknown owner - C:Program FilesDellSupportbrkrsvc.exeO23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:PROGRA~1COMMON~1McAfeeEmProxyemproxy.exeO23 - Service: GoogleDesktopManager - Google - C:Program FilesGoogleGoogle Desktop SearchGoogleDesktopManager.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exeO23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:Program FilesCommon FilesMcAfeeHackerWatchHWAPI.exeO23 - Service: McAfee Log Manager (McLogManagerService) - McAfee, Inc. - C:PROGRA~1McAfeeMSCmclogsrv.exeO23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:PROGRA~1McAfeeMSCmcupdmgr.exeO23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:PROGRA~1McAfeeVIRUSS~1mcods.exeO23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:PROGRA~1McAfeeMSCmcpromgr.exeO23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:PROGRA~1COMMON~1mcafeemcproxymcproxy.exeO23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:PROGRA~1COMMON~1mcafeeredirsvcredirsvc.exeO23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:PROGRA~1McAfeeVIRUSS~1mcshield.exeO23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:PROGRA~1McAfeeVIRUSS~1mcsysmon.exeO23 - Service: McAfee Task Scheduler (mctskshd.exe) - McAfee, Inc. - C:PROGRA~1McAfeeMSCmctskshd.exeO23 - Service: McAfee User Manager (mcusrmgr) - McAfee, Inc. - C:PROGRA~1McAfeeMSCmcusrmgr.exeO23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:Program FilesMcAfeeMPFMPFSrv.exeO23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:PROGRA~1McAfeeMPSmps.exeO23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:Program FilesMcAfeeMSKMskSrver.exeO23 - Service: RoxMediaDB9 - Sonic Solutions - C:Program FilesCommon FilesRoxio Shared9.0SharedCOMRoxMediaDB9.exeO23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:Program FilesCommon FilesRoxio Shared9.0SharedCOMRoxWatch9.exeO23 - Service: Remote Procedure Call (RPC) Net (Rpcnet) - Absolute Software Corp. - C:WindowsSYSTEM32Rpcnet.exeO23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:Program FilesSigmaTelC-Major AudioWDMSTacSV.exeO23 - Service: stllssvr - MicroVision Development, Inc. - C:Program FilesCommon FilesSureThing Sharedstllssvr.exeO23 - Service: XAudioService - Conexant Systems, Inc. - C:Windowssystem32DRIVERSxaudio.exe--End of file - 9245 bytes

[SpiritWind]

{size:18px}[/size]:D Hi : You are the 1st person I have seen post a HJT log using the Ver 2.00 Beta . HijackThis logs are BEST analyzed by Malware Experts usually found on antiSPYWARE Support Forums; from your Log you do NOT appear to have any antiSPYWARE/ antiTROJAN programs, just suspect McAfee and suspect "Google Desktop", neither of which I would have on my computer. I recommend you post this LOG in the "HijackThis Logs and Assistance" forum on the Spyware Beware Forums located at http://forums.maddoktor2.com/index.php . There are many EXPERIENCED, TRAINED & VOLUNTEER Experts there .

[IMissXp]

Thanks alot, Im on the way over there now

[IMissXp]

Nobody has been able to help me there, or anywhere else. Somebody please help me:cry:

[AuroraDizon]

I usually post my HJT log at www.iamnotageek.com they have an analyzer but its not working right now (with your log or perhaps in general I'm not really sure.) Anyway you could try posting your log on there forum.

[SpiritWind]

{size:18px}[/size] Hi "IMissXp" : For some unexplained reason(s), the HijackThis forum at Spyware Beware have suddenly become inactive ; I checked the one at Castlecops a couple of days ago and they seem "busy" . Best to stay away from "Analyzers" and get help from a real person. So I recommend you "register" at www.castlecops.com , then post your log at www.castlecops.com/f67-HijackthisSpywareVirusesWormsTrojansOhMy.html .

[IMissXp]

Thanks for the help guys, these are the only forums that tried to help. I posted this same topic in atleast 5 other forums.The problem is fixed! I don't know how it fixed itself but Windows refused to start which caused some startup fix thing to start, 30 minutes later I tried to open a program and the problem was gone. :DThe only unfortunate thing is, I wish I knew exactly what I did. So I could help those with the same problem. :(

[peashooter]

Ever Since I Installed Vista SP1, my computer has gone to crap. mine occurs with Excel.exe every time I run my PC for more than a day. I also notice that onenote's screen capture tool fails. I notice it has something to do with memory management in Vista

IT SUCKS BIG TIME the memory managment in Vista is a Joke!