XP Search from Start Menu doesn't work

I have been unable to use the Search facility in the Start Menu. The menu item is there, but on selecting it, the computer freezes for approx 20 seconds then starts working again but with no search. Search does appear to work from Explorer. A few other new problems have appeared at the same time, notably a failure to download some web pages especially from links in other pages - eg on the Majorgeeks registration email, pressing the hotlink led to a freeze but no web page. I think this problem first showed itself after downloading the latest Windows auto update yesterday -but I can't be certain.

Any ideas gratefully welcome. Is it spyware or something else. Adaware and Spybot show no problem. I have tried scannow (no prob) and reinstalling XP sp2.

Thanks
Jim

Logfile of HijackThis v1.99.1
Scan saved at 18:06:21, on 15/04/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
J:\WINDOWS\System32\smss.exe
J:\WINDOWS\system32\winlogon.exe
J:\WINDOWS\system32\services.exe
J:\WINDOWS\system32\lsass.exe
J:\WINDOWS\system32\Ati2evxx.exe
J:\WINDOWS\system32\svchost.exe
J:\WINDOWS\System32\svchost.exe
J:\WINDOWS\system32\spoolsv.exe
J:\WINDOWS\system32\Ati2evxx.exe
J:\WINDOWS\Explorer.EXE
J:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
J:\WINDOWS\system32\RunDll32.exe
J:\Program Files\USB Storage Device\shwicon.exe
J:\Program Files\NavNT\vptray.exe
J:\Program Files\HighCriteria\TotalRecorder\TotRecSched.exe
J:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
J:\Program Files\Xerox One Touch\OneTouchMon.exe
J:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE
J:\Program Files\Microsoft Hardware\Mouse\point32.exe
J:\Program Files\Logitech\Video\LogiTray.exe
J:\Program Files\BT Voyager 105 ADSL Modem\dslstat.exe
J:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
J:\Program Files\BT Voyager 105 ADSL Modem\dslagent.exe
J:\Program Files\QuickTime\qttask.exe
J:\Program Files\Common Files\Real\Update_OB\realsched.exe
J:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
J:\Program Files\MSN Messenger\msnmsgr.exe
J:\Program Files\BBC News alerts\skinkers.exe
J:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
J:\Program Files\Belkin\Belkin Wireless Network Utility\WLService.exe
J:\Program Files\Belkin\Belkin Wireless Network Utility\WLanCfgG.exe
J:\Program Files\NavNT\defwatch.exe
J:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
J:\Program Files\AOL 9.0\aoltray.exe
J:\WINDOWS\system32\LVComS.exe
J:\Program Files\Sony Handheld\HOTSYNC.EXE
J:\Program Files\Microsoft Office\Office\FINDFAST.EXE
J:\Program Files\NavNT\rtvscan.exe
J:\WINDOWS\System32\snmp.exe
J:\WINDOWS\System32\svchost.exe
J:\Program Files\AOL\Broadband CheckUp\bin\mpbtn.exe
J:\WINDOWS\system32\UAService7.exe
J:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
J:\WINDOWS\system32\MsgSys.EXE
J:\Program Files\Internet Explorer\iexplore.exe
J:\Program Files\Internet Explorer\iexplore.exe
J:\Program Files\Outlook Express\msimn.exe
J:\Program Files\Messenger\msmsgs.exe
J:\DOCUME~1\JIMSCR~1\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://uk.red.clientapps.yahoo.com/customize/ie/defaults/su/ymsgr6/uk/*http://www.yahoo.co.uk
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://uk.red.clientapps.yahoo.com/...k/*http://uk.docs.yahoo.com/info/bt_side.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://uk.red.clientapps.yahoo.com/customize/ie/defaults/sp/ymsgr6/uk/*http://www.yahoo.co.uk
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://uk.red.clientapps.yahoo.com/customize/ie/defaults/stp/ymsgr6/uk/*http://www.yahoo.co.uk
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://uk.red.clientapps.yahoo.com/customize/ie/defaults/su/ymsgr6/uk/*http://www.yahoo.co.uk
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - J:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_3_12_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - J:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1C044AAD-7955-4cbd-8175-501A165C4E5D} - J:\WINDOWS\system32\req.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - J:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - j:\program files\google\googletoolbar1.dll
O2 - BHO: QUICKfind BHO Object - {C08DF07A-3E49-4E25-9AB0-D3882835F153} - J:\PROGRA~1\TEXTware\QUICKF~1\PlugIns\IEHelp.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - j:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - J:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_3_12_0.dll
O4 - HKLM\..\Run: [ATIPTA] J:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [NeroCheck] J:\WINDOWS\System32\\NeroCheck.exe
O4 - HKLM\..\Run: [ShowIcon_The Company_USB Storage Device v1.14e035] "J:\Program Files\USB Storage Device\shwicon.exe" -t"The Company\USB Storage Device v1.14e035"
O4 - HKLM\..\Run: [vptray] J:\Program Files\NavNT\vptray.exe
O4 - HKLM\..\Run: [TotalRecorderScheduler] "J:\Program Files\HighCriteria\TotalRecorder\TotRecSched.exe"
O4 - HKLM\..\Run: [MPFExe] J:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [IndexSearch] J:\Program Files\Scansoft\PaperPort\IndexSearch.exe
O4 - HKLM\..\Run: [OneTouch Monitor] "J:\Program Files\Xerox One Touch\OneTouchMon.exe"
O4 - HKLM\..\Run: [InstantAccess] J:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE /h
O4 - HKLM\..\Run: [RegisterDropHandler] J:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] J:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] J:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [DSLSTATEXE] J:\Program Files\BT Voyager 105 ADSL Modem\dslstat.exe icon
O4 - HKLM\..\Run: [DSLAGENTEXE] J:\Program Files\BT Voyager 105 ADSL Modem\dslagent.exe
O4 - HKLM\..\Run: [MSConfig] J:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [QuickTime Task] "J:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "J:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] J:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\RunServices: [RegisterDropHandler] J:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
O4 - HKCU\..\Run: [msnmsgr] "J:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] J:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [BBC News alerts] J:\Program Files\BBC News alerts\skinkers.exe
O4 - Startup: HotSync Manager.LNK = J:\Program Files\Sony Handheld\HOTSYNC.EXE
O4 - Global Startup: AOL 9.0 Tray Icon.lnk = J:\Program Files\AOL 9.0\aoltray.exe
O4 - Global Startup: AOL Broadband Check-Up.lnk = J:\Program Files\AOL\Broadband CheckUp\bin\matcli.exe
O4 - Global Startup: HotSync Manager.lnk = J:\Program Files\Sony Handheld\HOTSYNC.EXE
O4 - Global Startup: Microsoft Find Fast.lnk = J:\Program Files\Microsoft Office\Office\FINDFAST.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Google Search - res://j:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Yahoo! Search - file:///J:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Backward Links - res://j:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://j:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://j:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://j:\program files\google\GoogleToolbar1.dll/cmtrans.html
O8 - Extra context menu item: Yahoo! &Dictionary - file:///J:\Program Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - J:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - J:\WINDOWS\system32\msjava.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - J:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - J:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - J:\Program Files\Yahoo!\Messenger\yhexbmes0527.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - J:\Program Files\Yahoo!\Messenger\yhexbmes0527.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - J:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - J:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aolsvc.aol.co.uk/computercheckup/qdiagcc.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/2045a69cf84374cedc17/netzip/RdxIE601.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - http://launch.gamespyarcade.com/software/launch/alaunch.cab
O16 - DPF: {AE9DCB17-F804-11D2-A44A-0020182C1446} (IntraLaunch.MainControl) - file://I:\SuperCD\IntraLaunch.CAB
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.apple.com.edgesuite.net/detection/ITDetector.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{E017E8B0-5AA4-4EC6-B770-70855DD2500C}: NameServer = 205.188.146.145
O20 - Winlogon Notify: NavLogon - J:\WINDOWS\System32\NavLogon.dll
O20 - Winlogon Notify: req - J:\WINDOWS\system32\req.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - J:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - J:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - J:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Belkin 54g Wireless USB Network Adapter (Belkin 54g Wireless USB Network Adapter Service) - Unknown owner - J:\Program Files\Belkin\Belkin Wireless Network Utility\WLService.exe
O23 - Service: DefWatch - Symantec Corporation - J:\Program Files\NavNT\defwatch.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - J:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: Norton AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - J:\Program Files\NavNT\rtvscan.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - J:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - J:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005\RpcSandraSrv.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - J:\WINDOWS\system32\UAService7.exe

 

I have found the solution myself. I'll put it here in case anyone else has this problem after the April Microsoft security update.

Just to recap, the symptoms were: (1) Search from Start menu not working (freeze for 20 seconds then nothing) (2) hotlinks from many web sites not working (ditto - short freeze) (3) general slowdown. As far as I can see the problem seems to involve a number of dll and other files having been deleted (or moved to wrong locations) and was I believe a direct result of the latest security upgrade.

Solution:
I used iefix (downloadable on this site) and selected the option to enable a reinstall of internet explorer. I then ran XP SP2 install from disc (I guess it would also work from web site) which reinstalled internet explorer. This seemed to resolve all three issues instantly.

Jim

 

I'm glad repairing it worked for you but I would suggest you go to the Spyware Forum and follow their recommendations, if you haven't already, to rule out infection.