Annoying Dialogue Boxes at Startup

Discussion in 'Malware Help (A Specialist Will Reply)' started by goliano, Jan 2, 2006.

  1. goliano

    goliano Corporal

    I've read and executed the tasks in 'READ & RUN ME FIRST Before Asking for Support' and have attached the log files from 'BitDefender Scan' (had to .zip it), 'Panda Software ActiveScan', and 'HijackThis'.

    Problem:
    On every startup I’m getting two dialogue boxes:

    +------------------------------------------------------------------+
    | The Requested control is not valid for this service… ? X |
    +------------------------------------------------------------------+
    | X ControlService |
    | |
    | |
    | OK |
    +------------------------------------------------------------------+

    followed by:

    +------------------------------------------------------------------+
    | Server Busy X |
    +------------------------------------------------------------------+
    | ! This action cannot be completed because the other |
    | program is busy. Choose ‘Switch To’ to activate the |
    | busy program and correct the problem. |
    | |
    | |
    | Switch To… Retry Cancel |
    +------------------------------------------------------------------+

    When I click 'OK' on the first box... it goes away permanently.

    If I click 'Retry' on the second box, the box re-appears, indefinitely. If I click 'Switch To...' the box re-appears maybe 4 or 5 times, before disappearing and bringing up my Start Menu, as if I'd clicked 'Start' in the lower-left corner. Other than that, I've noticed no other problems.

    I deleted the one file that BitDefender found ('C:\Program Files\AIM\Sysfiles\WxBug.EXE') and two of the three that Panda Software found ('C:\WINDOWS\hh.ico' and 'C:\Documents and Settings\CWJr\Local Settings\Temp\nskA2.tmp\System.dll'). I didn’t know what to do with 'Adware:adware/powerstrip' referenced at Location: 'Windows Registry.'

    Thanks in advance.

    Peace and Happy New Year!!!

    Goliano
     

    Attached Files:

    goliano, Jan 2, 2006
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I'm not sure if those are malware related messages or not. What (if anything) have you added or deleted from the PC since we last worked on it a little while ago.

    For the other problems, contine


    Look in Add/Remove Programs and uninstall the below if found:
    SafeSurf
    Powerstrip

    Copy the contents of the below Quote Box to Notepad. Then click File and then Save As. Change the Save as Type to All Files. Name the file fixme.reg and then click save. (make sure you save it somewhere you can find it. Saving it to your Desktop may make that easy.) Then double-click on the fixme.reg file on your desktop (or locate it with Windows Explorer and double click on it if not saved to the Desktop) and when it prompts to Add in to the registry, say yes.
    Now open a command prompt window (Click Start, Run and enter cmd and click OK) and enter the following commands (use the quotes):
    cd "%WinDir%\System"
    regsvr32 /u "\Program Files\PowerStrip\PowrStrp.dll"

    Now reboot your PC and look for the below and delete if found:
    C:\Program Files\PowerStrip <-- the whole folder
    C:\Program Files\Common Files\Presentia <-- the whole folder

    You can also open the C:\Windows\Downloaded Program Files and right-click the ‘PowerStrip Setup’ (PSOCX variant) or ‘PSSetup Class’ (PSSetup variant) entry and choose ‘Remove’. (This last step assume you find these setups.)

    Tell me where things stand now.
     
    chaslang, Jan 2, 2006
    #2
  3. goliano

    goliano Corporal

    This is a different computer.

    Could not find any of the files listed and received the attached error after running regsvr32.

    Goliano
     

    Attached Files:

    goliano, Jan 3, 2006
    #3
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    That's okay! It just means the file did not exist.

    Your other issues are probably not malware related. It seems like some application is running at startup that is making use of some kind of VB controls and it is running into problems.

    Does this happen if you boot in safe mode?

    You could also try using msconfig to stop certain processes or services from running and see if you can isolate the problem.
     
    chaslang, Jan 3, 2006
    #4
  5. goliano

    goliano Corporal

    No, not in safe mode.

    I'll try msconfig and see what I can find.

    Thanks.
     
    goliano, Jan 3, 2006
    #5
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay one thing you can look at they may help, is a HijackThis log from safe mode and compare what is running in safe mode to normal mode. This may or may not help because not everything that runs at startup remains running nor does it show in a HijacThis log.
     
    chaslang, Jan 3, 2006
    #6

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds