PCTech Forums

by **venney** » Thu Sep 02, 2004 5:54 pm

i have got Cheetah CD Burner installed on the pc, but when is tart it up it cxomes up witha windows installer and trys to install summint for my logi tec web cam. why is this? n how do i get rid of it. it does it with another program as well but i dont rember which. i suppose maby i cpould downlaod what eva its asking for then when it comes up, browse for the file and install it like its asking me to. please write back. thanks

venney

by **Cactus** » Thu Sep 02, 2004 11:18 pm

What's the Model # of your Cheetah CD Burner?

Cactus

by **Restek** » Thu Sep 02, 2004 11:23 pm

I'm not too sure what you're asking - what exactly triggers this install process?

by **venney** » Fri Sep 03, 2004 12:56 am

well what happens is when i load it, as in start it wen i want to burn something, it comes up with windows installer "prepairieng to install"
and it comes up with logitech quickcam and says the feature i am tryiong to use is unavailable and asks to install it
C:\Program Files\Logitech\QuickCamWebInstall\AppInst\
thast the path file it askes for. this same thing happens when i use "PIXresizer"
n e 1 seen this problem before? i can use both programs but i ahev to keep pressing cancel laods to get rid of the installer thing. i do own a logitec quickcam but that works so i dont no y it wants to install more. write back plz

by **Cactus** » Fri Sep 03, 2004 1:06 am

Have you tried letting it install?
Sounds like a feature of the Burner?

Like I asked in my post above...what is the Model# ???

Cactus

by **venney** » Sat Sep 04, 2004 11:37 pm

by **Cactus** » Sat Sep 04, 2004 11:51 pm

Venney run and post your logfile...let's see if there's anything showing up the log.

Cactus

by **Cactus** » Sat Sep 04, 2004 11:56 pm

Sorry...just in case your not familliar with HTJ:

---Important---Create a permanent folder
EG---- Open MyDocuments----Right click an empty spot and select NEW---Folder----Name the new folder HJT ---this is where you will want to save Hijackthis too, also, backups will be stored there.

Do a SCAN----Scan will change to SAVE LOG----copy and paste the WHOLE contents of the log
here... Don't try and fix anything yet----most entries are harmless and needed.

Cactus

by **venney** » Sun Sep 05, 2004 1:21 pm

soz for the late ness of my reply, heres my log

Logfile of HijackThis v1.98.2
Scan saved at 13:21:37, on 05/09/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\pavsrv51.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\AVENGINE.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\Dit.exe
C:\WINDOWS\system32\GSICON.EXE
C:\WINDOWS\system32\dslagent.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE
C:\WINDOWS\DitExp.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\pavProxy.exe
C:\Program Files\BitTornado\btdownloadgui.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\BitTornado\btdownloadgui.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Lawrence\Desktop\Random things\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [VOBRegCheck] C:\WINDOWS\System32\VOBREGCheck.exe -CheckReg
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [GSICONEXE] GSICON.EXE
O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe USB
O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [FOUR STORE] C:\PROGRA~1\BLEHWI~1\default frag.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files\Panda Software\Panda Antivirus Platinum\Inicio.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE" /s
O4 - HKCU\..\Run: [PopUpStopperProfessional] "C:\PROGRA~1\PANICW~1\POP-UP~1\POPUPS~1.EXE"
O4 - HKCU\..\Run: [UninstallAbility] "C:\Program Files\UninstallAbility\uability.exe" /AUTO
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... Client.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{013A7D65-1582-4014-AE65-D077E2EE15BC}: NameServer = 194.72.9.38 194.74.65.69
O17 - HKLM\System\CS1\Services\Tcpip\..\{013A7D65-1582-4014-AE65-D077E2EE15BC}: NameServer = 194.74.65.69 194.72.9.38

please help me, this thing is annoying.
thanks!

by **Cactus** » Sun Sep 05, 2004 4:08 pm

Hey venney...
The log looks clean except for 1 entry that I can't seem to find much info on!!
Do you have any ideas as to what it is?

O4 - HKLM\..\Run: [FOUR STORE] C:\PROGRA~1\BLEHWI~1\default frag.exe

Press Ctrl/Alt/Del and "End Task" or "End Process" on each of the following: (They may or may not be there)

default frag.exe

Turn off System Restore. (Turn it back on after this is repaired and you've rebooted.) Close all other open Windows and have HiJackThis Fix:

R3 - Default URLSearchHook is missing
O4 - HKLM\..\Run: [FOUR STORE] C:\PROGRA~1\BLEHWI~1\default frag.exe

The next are optional, but recommended for removal,Resource hogs and not needed on startup, but does not disable the program:

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

Go to Control Panel / Add/Remove Programs and remove the
following if they are there:

FOUR STORE
default frag

Now delete these Folders or Files that are Highlighted: (You may need enable "Show all Files" and disable "Hide System Files" in Windows Explorer / Tools / Folder Options / View Tab) (You may have to boot to "Safe Mode" in order to delete some Files/Folders)

C:\PROGRA~1\BLEHWI~1\default frag.exe

Now, empty all your TEMP Folders (WinXp has up to 4 of them) / Temporary Internet Files Folder and then empty your "Recycle Bin".

RESTART your computer
Post back with a Fresh hijackthis log and let me know how your doing.

Cactus

by **venney** » Wed Sep 08, 2004 4:40 pm

by **Cactus** » Wed Sep 08, 2004 4:49 pm

Here's a link to check out venney
http://www.bookcase.com/library/softwar ... stall.html

Check out the first application shown.

Cactus

by **venney** » Thu Sep 09, 2004 12:12 am

AppInst
Version: 2.1

Summary: Freeware install utility for DOS

License: Freeware

Email: magluby@geocities.com

Download: appinst.zip (Jun 12 1997, 88.4K)

Description:
AppInst v2.1 is the first public release of a program the author originally wrote for himself to help preserve disk space. If you look around your hard disk, you'll probably see that there's a lot of programs you rarely use, but don't want to delete. You can move them onto floppies, but re-installing them to your hard disk can be tedious, so this is where AppInst comes in. It can store up to 1600 different procedures for installing programs, so all you have to do is select a program from a list to install it.

ok sorry it coudl b cos its late at ntie but im not really sure if i install this of what it will do?? how will it help my porblem? please write back, thanks
venney

by **Cactus** » Thu Sep 09, 2004 12:33 am

Before you D/L any Installer Apps did you try un-installing the Logitech Cam and then Re-install it,see if it loads the file.

Have you gone to that folder to see if it's there?

File location...

C:\Program Files\Logitech\QuickCamWebInstall\AppInst\

Also can you post a fresh HJT logfile.

Cactus

by **venney** » Thu Sep 09, 2004 11:07 am

cheers mate,
in that folder theres "instal.ini"
ok heres my log thing

Logfile of HijackThis v1.98.2
Scan saved at 11:07:11, on 09/09/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\pavsrv51.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\AVENGINE.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Panda Software\Panda Antivirus Platinum\apvxdwin.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\Dit.exe
C:\WINDOWS\system32\GSICON.EXE
C:\WINDOWS\system32\dslagent.exe
C:\Program Files\Logitech\ImageStudio\LogiTray.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\POPUPS~1.EXE
C:\WINDOWS\DitExp.exe
C:\Program Files\Logitech\ImageStudio\LowLight.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\pavProxy.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Lawrence\Desktop\Random things\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [VOBRegCheck] C:\WINDOWS\System32\VOBREGCheck.exe -CheckReg
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [GSICONEXE] GSICON.EXE
O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe USB
O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files\Panda Software\Panda Antivirus Platinum\Inicio.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE" /s
O4 - HKCU\..\Run: [PopUpStopperProfessional] "C:\PROGRA~1\PANICW~1\POP-UP~1\POPUPS~1.EXE"
O4 - HKCU\..\Run: [UninstallAbility] "C:\Program Files\UninstallAbility\uability.exe" /AUTO
O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... Client.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{013A7D65-1582-4014-AE65-D077E2EE15BC}: NameServer = 194.72.9.38 194.74.65.69
O17 - HKLM\System\CS1\Services\Tcpip\..\{013A7D65-1582-4014-AE65-D077E2EE15BC}: NameServer = 194.74.65.69 194.72.9.38

hopefully u will also tell me to remove some thing thats int here, i dont know what but again my pc when its botting up and goes to the scanning memory takes ages. some one helped me b4 and it stopped so can you see if any thing is in this 1 as well.
thank you
(alot

)

- Venney

PCTech Forums

Cheetah CD Burner

Cheetah CD Burner

Who is online