Announcement

Collapse
No announcement yet.

p-07-0100 irql: 1f SYSVER 0xff00024 NT_Kernal error 1256 KMO

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

    p-07-0100 irql: 1f SYSVER 0xff00024 NT_Kernal error 1256 KMO

    i get two of these messages every time i log in
    ive noticed that internet explorer apps dont work and my computer runs considerably slower

    heres the hijack log
    Logfile of HijackThis v1.99.1
    Scan saved at 1:37:03 AM, on 3/4/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.5730.0013)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\lxddcoms.exe
    C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
    C:\WINDOWS\system32\PnkBstrA.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\Program Files\Dell\QuickSet\quickset.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
    C:\Program Files\Ideazon\ZEngine\Zboard.exe
    C:\Program Files\Digital Line Detect\DLG.exe
    C:\Program Files\Logitech\SetPoint\SetPoint.exe
    C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
    C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
    C:\WINDOWS\explorer.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Documents and Settings\Me\Desktop\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/dell?hl=en&...suk&channel=us
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = http://www.google.com/ig/dell?hl=en&...suk&channel=us
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/yco.../www.yahoo.com
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
    O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
    O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
    O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
    O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
    O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
    O4 - HKLM\..\Run: [Zboard] C:\Program Files\Ideazon\ZEngine\Zboard.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [BM07f0e8b2] Rundll32.exe "C:\WINDOWS\system32\miqmtekr.dll",s
    O4 - HKLM\..\Run: [04c3db2e] rundll32.exe "C:\WINDOWS\system32\sbgwbwjf.dll",b
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Global Startup: Digital Line Detect.lnk = ?
    O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: iPodService - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: lxdd_device - - C:\WINDOWS\system32\lxddcoms.exe
    O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
    O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    O23 - Service: Viewpoint Manager Service - Unknown owner - C:\Program Files\Viewpoint\Common\ViewpointService.exe (file missing)
    O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

    everything but these two
    O4 - HKLM\..\Run: [BM07f0e8b2] Rundll32.exe "C:\WINDOWS\system32\miqmtekr.dll",s
    O4 - HKLM\..\Run: [04c3db2e] rundll32.exe "C:\WINDOWS\system32\sbgwbwjf.dll",b
    (and matching programs running)
    seem normal to me but maybe i missed something else to

    #2
    O4 - HKLM\..\Run: [BM07f0e8b2] Rundll32.exe "C:\WINDOWS\system32\miqmtekr.dll",s
    --Kill it. Remove it. delete it. Spyware.

    O4 - HKLM\..\Run: [04c3db2e] rundll32.exe "C:\WINDOWS\system32\sbgwbwjf.dll",b
    --Kill it. Remove it. delete it. Spyware

    O23 - Service: Viewpoint Manager Service - Unknown owner - C:\Program Files\Viewpoint\Common\ViewpointService.exe (file missing)
    --Remove this. The file is missing anyway so it is just something the machine has to look for upon boot.

    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    --There should only be one of these running, if I am not mistaken but I usually shut down all of these. Ipod services are resource hogs and are only needed when you are plugging in the Ipod.

    --I hate yahoo toolbar or ANY toolbar for that matter.

    --Is this a Laptop or are you running a wireless network card? If you don't use the wireless or only use it when absolutely necessary, you might want to consider making these wireless programs start manually instead of automatically.

    --Search for and download ComboFix. When you download Combofix.exe save it as Combo-Fix.exe and not combofix.exe.
    A caution - Do not run Combo-fix more than once. Do not touch your mouse/keyboard until the scan has completed, as this may cause the process to stall or your computer to lock. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop. Even when Combo-Fix appears to be doing nothing, look at your Drive light. If it is flashing, Combo-fix is still at work.

    --You might have to download a program called Vundofix. Trojan.Vundo is a component of an adware program that downloads and displays pop-up advertisements. It is known to be installed by visiting a Web site link contained in a spammed email. VUNDO causes computers to have this particular error that you have posted as the topic.

    Comment


      #3
      Ouch. What websites have you been viewing Min?

      Comment


        #4
        Please run the programs that Mike linked in SAFE MODE as well. It works much better than logged in normally.
        Oh if a man tried to take his time on Earth and prove before he died what one man's life could be worth, well I wonder what would happen to this world ? - Harry Chapin

        Comment


          #5
          well that seemed to do the trick
          but i still cant get my IE addons to work
          i use the yahoo toolbar to keep me uptodate on my email
          and piclens cause its cool
          but i cant get either to work

          Comment


            #6
            GOOD! they suck.

            You'll probably need to reinstall them if you really need to use them. Uninstall the old first and reinstall.

            Comment


              #7
              Yahoo toolbar ?????????





              Fails to compute ....

              Do us a favor and ditch that piece of garbage. I can personally attest to its issues used in conjunction with IE under certain circumstances, so ... get rid of it.
              Oh if a man tried to take his time on Earth and prove before he died what one man's life could be worth, well I wonder what would happen to this world ? - Harry Chapin

              Comment


                #8
                well i ditched yahoo toolbar (found a widget that does the same thing)
                tried reinstalling piclens but to no avail...

                Comment

                Cain's Lair Forums Statistics

                Collapse

                Topics: 26,187   Posts: 269,850   Members: 6,183   Active Members: 7
                Welcome to our newest member, Fermin13Q.

                Today's Birthdays

                Collapse

                Top Active Users

                Collapse

                There are no top active users.

                More Posts

                Collapse

                • Reply to Hi guys!
                  by Evil_T0NY {CLR}
                  I've been Alpha and will be Beta testing the Delta Force game. It's been really getting good reviews! Definitely a good Battlefield feel to it like the...
                  14 Nov 2024, 08:50 PM
                • Reply to Hope your all OK over there
                  by Apache Warrior
                  We had 17 inches of rain from the storm on November 7, 2024.
                  Apache
                  11 Nov 2024, 07:55 AM
                • Reply to Hope your all OK over there
                  by Sirex
                  Aye, I'm inclined to agree with that lmao
                  Gone are the days of warm summers and snow filled winters here, nothing but rain and wind for 8mths of...
                  10 Nov 2024, 08:53 PM
                • Reply to Hope your all OK over there
                  by Apache Warrior
                  Now we have had a lot of flooding in this area and there are still a lot of houses that have not been repaired. Must be the apocalypse.
                  ...
                  8 Nov 2024, 09:23 AM
                Working...
                X