What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Software

Help!

5 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
I think I deleted something from my laptop I really shouldn't have! I was trying to get rid of Symantec on my laptop bc i have too many anti-virus softwares. I deleted something that said "SYMEVNT.386." Properties menu described it as a virtual device – a driver. Now, my NetZero doesn't start. Any suggestions?
Post #3
Hi Shelf Life, In answer to your question about what I meant by losing my connection: The NetZero box with the green "connect" button comes up, but when I hit the button, absolutely nothing happens: no page, no sound, no activity. That's never happened before. When I click on the NetZero desktop icon again, it says "NetZero already running." But when I go to task manager to doublecheck, there's no NetZero/Netscape listed anywhere. The really weird thing is, on one of my attempts, I clicked on Internet Explorer instead of Netscape and it brought up the Yahoo home page for about 30 seconds before that went blank! As far as reinstalling Symantec, which I have on a cd-rom, it failed, at least the one time I tried before I had to leave for work. Oh, and whenever I boot up, I always get this message that "Installation failed because a device was missing" and then says "Windows Prog: C/Symantec/Symevnt.386" (or something very similar) The message dates to when I originally installed this program, then uninstalled it and tried to reinstall with an updated version. I'm mystified by this – I don't understand how I can lose my Internet connection because I deleted a device that's part of an anti-virus program, and why I can't reinstall the d**n thing and be done with it. Appreciate any further input. Regards, Moncrieff
Post #4
hi moncrieff,

go ahead and post a hjt log, may provide some clues:

—–>go here http://www.subratam.org and under Removal Tools link- find and download—-> Hijackthis.
Dont run it from within the zip file. Extract to a folder such as c:\Antispyware\Hijackthis\ or c:\Program Files\Hijackthis\ but not on your Desktop or a temporary folder.
This will allow us to use backups to restore entries if necessary and prevent it from being deleted when the temporary folders are cleaned out or creating its backup(s) or backup folder on the Desktop.

Once you have hijackthis.exe in it's permanent folder:
Start the program
Press Scan.
After the scan- the Scan button will change to a Save Log button.Save the log somewhere like your desktop.
Most of the log is harmless. dont fix anything yet.
copy/paste the saved log in your next reply.
Post #5
Hi Shelflife,
Below is a HijackThis log I made today. I'm able to get on the Internet now, but still can't bring up my NetZero home page. Appreciate any input you might have
Moncrieff

Logfile of HijackThis v1.99.1
Scan saved at 2:01:23 PM, on 4/5/2005
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\COMPAQ\CPQINET\CPQINET.EXE
C:\WINDOWS\CPQDIAG\CPQDFWAG.EXE
C:\COMPAQ\INTERNET\ISDBDC.EXE
C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\VSHWIN32.EXE
C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\WEBSCANX.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\VSSTAT.EXE
C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\BTTNSERV.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\ATICWD32.EXE
C:\WINDOWS\SYSTEM\ATITASK.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPLPR.EXE
C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPENH.EXE
C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\CPQEADM.EXE
C:\CPQS\BWTOOLS\SCCENTER.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SYSTEM\INTERNAT.EXE
C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\AVCONSOL.EXE
C:\PROGRAM FILES\REAL\REALPLAYER\REALPLAY.EXE
C:\PROGRAM FILES\MICROSOFT MONEY\SYSTEM\REMINDER.EXE
C:\PROGRAM FILES\COMPAQ\ON-SCREEN DISPLAY\OSD.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\MY DOCUMENTS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://my.netzero.net/s/search?r=minisearch
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://my.netzero.net/s/search?r=minisearch
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://my.netzero.net/s/search?r=minisearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://my.netzero.net/s/search?r=minisearch
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.netzero.net
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://my.netzero.net/s/search?r=minisearch
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = www.netzero.net
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://my.netzero.net/s/search?r=minisearch
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = www.netzero.net
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = www.netzero.net
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R3 - URLSearchHook: URLSearchHook Class - {37D2CDBF-2AF4-44AA-8113-BD0D2DA3C2B8} - C:\PROGRAM FILES\NZSEARCH\SEARCHENH1.DLL
N1 - Netscape 4: user_pref("browser.startup.homepage", "http://webmail.netzero.com"); (C:\Program Files\Netscape\Users\eledrei\prefs.js)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O2 - BHO: Popup-Blocker Class - {52706EF7-D7A2-49AD-A615-E903858CF284} - C:\PROGRAM FILES\NETZERO\QSACC\X1IEBHO.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] c:\windows\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [AtiCwd32] Aticwd32.exe
O4 - HKLM\..\Run: [AtiKey] Atitask.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [CPQEASYACC] C:\Program Files\Compaq\Easy Access Button Support\cpqeadm.exe
O4 - HKLM\..\Run: [EACLEAN] C:\Program Files\Compaq\Easy Access Button Support\eaclean.exe
O4 - HKLM\..\Run: [Service Connection] c:\cpqs\bwtools\sccenter.exe
O4 - HKLM\..\Run: [OEMCLEANUP] c:\windows\OPTIONS\oemreset.exe
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [Register MediaRing Talk] C:\Program Files\MediaRing Talk 99\register.exe
O4 - HKLM\..\Run: [internat.exe] internat.exe
O4 - HKLM\..\Run: [AvconsoleEXE] C:\Program Files\Network Associates\McAfee VirusScan\avconsol.exe /minimize
O4 - HKLM\..\Run: [VsecomrEXE] C:\Program Files\Network Associates\McAfee VirusScan\VSEcomR.EXE
O4 - HKLM\..\Run: [Vshwin32EXE] C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\VSHWIN32.EXE
O4 - HKLM\..\Run: [VsStatEXE] C:\Program Files\Network Associates\McAfee VirusScan\VSSTAT.EXE /SHOWWARNING
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [McAfeeWebScanX] C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\WebScanX.Exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [CPQInet Runtime Service] c:\compaq\CPQInet\CpqInet.exe
O4 - HKLM\..\RunServices: [CPQDFWAG] C:\WINDOWS\cpqdiag\CpqDfwAg.exe
O4 - HKLM\..\RunServices: [isdbdc] c:\compaq\internet\isdbdc.exe
O4 - HKLM\..\RunServices: [Vshwin32EXE] C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\VSHWIN32.EXE
O4 - HKLM\..\RunServices: [McAfeeWebScanX] C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\WebScanX.Exe /RUNSERVICES
O4 - HKCU\..\Run: [Reminder] C:\Program Files\Microsoft Money\System\reminder.exe
O4 - HKCU\..\Run: [NetZero_uoltray] C:\PROGRAM FILES\NETZERO\EXEC.EXE regrun
O4 - HKCU\..\Run: [spc_w] "C:\Program Files\NZSearch\nzspc.exe" -w
O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: AltaVista Home - http://jump.altavista.com/avie5/home
O8 - Extra context menu item: AV Search This Term - http://jump.altavista.com/avie5/search
O8 - Extra context menu item: AV Translate this Web Page - http://jump.altavista.com/avie5/babelfish
O8 - Extra context menu item: AV Translate Selection - http://jump.altavista.com/avie5/babelfish
O8 - Extra context menu item: Display All Images with Full Quality - res://C:\PROGRAM FILES\NETZERO\QSACC\appres.dll/228
O8 - Extra context menu item: Display Image with Full Quality - res://C:\PROGRAM FILES\NETZERO\QSACC\appres.dll/227
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O12 - Plugin for .pif: C:\PROGRAM FILES\NETSCAPE\COMMUNICATOR\PROGRAM\PLUGINS\npaudio.dll
O12 - Plugin for .pdf: C:\PROGRAM FILES\NETSCAPE\COMMUNICATOR\PROGRAM\PLUGINS\nppdf32.dll
O15 - Trusted IP range: 69.50.161.82
O15 - Trusted IP range: 69.50.161.82 (HKLM)
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
Post #6
hi moncrieff, what page shows up when you launch the internet explorer icon? cant you find the start page of your choice, the set it as the default in IE: tools>internet options> select use current did you add these to your trusted zone? O15 - Trusted IP range: [removed] O15 - Trusted IP range: [removed] did you use a netzero install cd?
Post #7
Hi Shelflife. Yahoo page shows up when I launch Internet Explorer. And the laptop operates more or less normally from that point on. But I'm having to use a manual (modem) dialup to get on the Net now, since the NetZero doesn't launch properly, and the computer's really slow. I need to check on the NetZero installation; my wife did that a few years ago. And, no, I didn't add those numbers/sites to the Trusted Zone. Should I zap them? I fixed the pesky "Symevnt.386" problem by deleting it from the Registry (there's reams of postings on the Web from other people who've had this same problem). So the bootup is back to normal. Sounds to me like uninstalling/reinstalling NetZero would be the way to go. But I can't imagine how interminably long that would be with the connection as slow as it is already … -Moncrieff
Post #8
yes i would have hjt fix those 015. scan with HJT, put a checkmark beside the items below, close all windows and click fix checked: O15 - Trusted IP range: [removed] O15 - Trusted IP range: 69.50.161.82 (HKLM) these are optional fixes that arnt needed you can have hjt fix: O4 - HKLM\..\Run: [AtiKey] Atitask.exe O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER O4 - HKLM\..\RunServices: [CPQDFWAG] C:\WINDOWS\cpqdiag\CpqDfwAg.exe O4 - HKCU\..\Run: [Reminder] C:\Program Files\Microsoft Money\System\reminder.exe O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE —————————— go to start>settings>control panel>internet options>under one of the tabs look for a button to Reset Web settings. (will set start page to MSN, you can change it though) also do this; Click Start>Run then type %temp% Hit OK. Delete all the files you can. Empty your Temp folders. Go to Start > Run and type:cleanmgr. Windows will scan. When done check these 3 and press *ok* to remove: Temporary Files Temporary Internet Files Recycle Bin —————————– you can get on the internet, so theres really no reason to uninstall/reinstall netzero.
Post #10
Hey Shelflife, I carried out your suggestions and my computer problems are gone! (as of this writing!). The NetZero browser launches normally now and the computer is operating at normal, pre-problems speed. It seems like deleting the temporary Internet files – i don't think that had ever been done! – and resetting the browser really made a difference. I fixed the Symevent problem, as I think I mentioned, by deleting it out of the registry after making a backup. I was even able to run trojanhunter and bitdefender this time (bit found a few .exe things in Windows; trojan found a single suspicious item). Here's something genuiinely bizarre though. As I was rebooting my cleaned-up machine, a gray, ghostly image of the "About: Blank" box appeared on the screen for a second or two, which about gave me a heart attack. It was "About: Blank" which started my chain of problems, and which I had eliminated from my computer many months ago. This "apparition" has occurred one or two times before, but it's never affected my computer that I know of and I've never been able to find any evidence of About: Blank being present using HJT, task manager or anything else. A computer quirk? Or did About: Blank's evil designers program a ghost of their virus to send its former victims screaming into the night? regards, Moncrieff
Post #11
hi, sorry for the delay. good to hear things are better. that about blank image is strange, never heard of that. i dont see any evidence of it in the log. its a good idea to run %temp% and cleanmgr ocassionaly.if you want to post a final hjt log for another look, go ahead.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI