C:\PROGRAM FILES\WINZIP\WZQKPICK.EXE. It part of WinZip.
Open Spybot S&D, click Mode>Advanced>Tools>Resident and remove the check from the Tea Timer box. You can reinstate it later but we don't want it interfering with what we need to do. Reboot in Safe Mode when done.
Use ALT/CTRL/DEL and end the process for WINPATROL
Run hijackthis. Hit None of the above, Click Do a System Scan Only. Put a Check in the box on the left side on these:
016's ALL of them
Close ALL windows and browsers except HijackThis and click "Fix checked"
Empty Recycle Bin
Reboot Normal and "copy/paste" a new log file into this thread.
Also please describe how your computer behaves at the moment.
The 016s are gone! Didn't notice anything strange through the reboot. Internet Explorer and Outlook Express are not working…I'm wondering if there are corrupted files having to do with their operation.
Again, I want to tell you how much I appreciate your patience and knowledge in dealing with this problem. Here is the latest HJT log: Logfile of HijackThis v1.99.1
Scan saved at 5:37:35 PM, on 04/17/2005
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\WINMODEM.101\wmexe.exe
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\STARTER.EXE
C:\PROGRAM FILES\LOGITECH\ITOUCH\ITOUCH.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGCC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGEMC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGAMSVR.EXE
C:\WINDOWS\TASKMON.EXE
C:\PROGRAM FILES\WINZIP\WZQKPICK.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\DESKTOP\HIJACKTHIS.EXE
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = [removed]:110
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [EnsoniqMixer] starter.exe
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [Logitech Utility] LOGI_MWX.EXE
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [ICSMGR] ICSMGR.EXE
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [winmodem] WINMODEM.101\wmexe.exe
O4 - HKLM\..\RunServices: [SchedulingAgent] C:\WINDOWS\SYSTEM\mstask.exe
O4 - Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll
When I click on that link I get an HTTp 404 file not found message. What now? Is Tea Timer an absolutely essential part of SpyBot or can we just leave it disabled?
Reboot. Run the TeaTimerReset batch file. Turn TeaTimer back on. Reboot. Scan with HijackThis and post the new log.
Let me see if I can find another link for that.
Lets see if we can fix the windows issues.
You can use windows sfc (system file checker) You'd need your W98 CD to make this work.
Click Start> Run> type sfc /scannow Note the space.
(Note that there is a space between sfc and /scannow)
The Tea Timer link downloaded with a black screen and "File not found". Start>Run> then typing sfc /scannow with the space you indicated gives me the message "The command line parameters are not valid. The following parameters were not recognized: "scannow". Is there any way to do the same thing by using the System Information tools?
I don't know if this is part of W98 or not.
1. Click Start, point to Programs, point to Accessories, point to System Tools, click System Information, and then click System File Checker on the Tools menu.
2. Click one of the following options:
Scan For Altered Files
3. Click Settings, choose the configuration you want to use in System File Checker Settings, click OK, and then click Start.
That should have worked. I've used that SFC /Scannow a hundred times.
If the above doesn't work, reboot Hit F8 and select Command Prompt.
at the C:\ sfc /scannow (type that in)
I do this System File Check method often and since I've been having problems at least once if not twice a day. I wrote down all of the files that required me to restore them from my disk and also any that would not restore. Is there a way to access the record and copy and paste? Or should I just type the info down for you to look at?
I have noticed that deleting those 016 things really cut down on the number of files that were reported as corrupted or altered.
If you had the CD in the drive, it should have replaced the bad ones. If you have them in a text file you could copy it into notepad and copy/paste it here.
I'm going to have to quit for the night…have to get up early and teach my two girls. Most of the files could be restored from the CD, but 9 couldn't. 25 files had to be restored. Where do I look to find a record of what the file check revealed? I'll check back here tomorrow morning.
Definitely my last post for the night. My installation disk may be a little scratched…it's old and came used like the computer itself, but it was free. (We have had the computer for about two years.) The altered files that couldn't be restored:
REGTLIB.EXE
hhsetup.dll
Slntf16.dll
Slntf32.dll
SlntfNT.dll
d3dim.dll
dsound.dll
ddraw.dll
MSISYS.VXD
Thank you very much, and good night.
I don't know if you'll find or be able to fix the dll's at this site. on the left side are what appear to be free scans and such. I know nothing about the site listed, but might be worth a shot.
I am using a public library computer right now. I finally had to take our computer to the shop. I couldn't get the link you showed in your last post, but found two things through an antivirus download. One had Micro in its name, the other began with BDS. (I don't have my notes with me; I gave my detailed logs to the computer tech for them to use.) All seemed to be OK (but still didn't have Internet Explorer or Outlook Express) until the next time I ran System File Checker. The things that I showed you in the last post were gone, but the same dll, exe, vxd, and ocx files had to be restored. In the middle of this, we got connected to our IPS. I thought nothing of it since the box for automatic connect was on. When File Checker got to the end, instead of stopping, it went back to the beginning and started over. It was then that I lost the ability to load SHELL32.DLL, even with a factory diskette or WIN 98SE CD.
I asked the tech guy at the shop if it might have been a macro virus, and he thought maybe so. Too many weird phantom things going on.
I'm sorry this problem took up so much of your time only for it to end this way. Thank you so much for trying to help me. If I ever have another problem, I will early on seek help from this web site. You have been very patient and kind! Again, I thank you.
You're more then welcome
Maybe he has a good copy of W98 to get the dll's from. It's also a lot easier to get rid of any bad guys when you have the computer in front of you. I'm sure he'll get you up and going
✨ Ask AI
AI can make mistakes. Check the cited posts. Archived advice can be out-of-date
Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI
Maybe he has a good copy of W98 to get the dll's from. It's also a lot easier to get rid of any bad guys when you have the computer in front of you. I'm sure he'll get you up and going