Error on startup

[Graham W.]

Computer starts up OK but now leaves an error message on desktop, (The page
cannot be displayed.......Cannot find server or DNS Error Internet Explorer).
The message is in minimized view and cannot be maximized but can be scrolled.
This has just started happening although the error message can be easily
cancelled. Everything operates as normal except system has become extremely
sssslllloooowwwww. I've had no reason to alter the settings in internet
options but have checked them anyway and can't find anything out of place. I
have also reset settings to default, but still the same. I'm running '98 SE.

Cheers
Graham

 

[glee]

You apparently have Internet Explorer set to start with Windows. Try removing it
temporarily from the startup axis and see what happens.

But before you do that, first do this:

Click Start>Run, type MSINFO32 and click OK.
In the left pane of the System Information window, click the + sign to expand the
"Software Environment" category.
In the left pane, click to select "Startup Programs"....they will appear in a list
on the right.
Press Ctrl-A on the keyboard, which will highlight everything in the list on the
right.
Press Ctrl-C to copy the list to the 'clipboard'.
Open a reply to this message, click in the body of the message and press Ctrl-V to
paste the list from the clipboard to the message, and post back to this thread.
--
Glen Ventura, MS MVP Shell/User, A+
http://dts-l.org/
http://dts-l.org/goodpost.htm


"Graham W." <GrahamW@discussions.microsoft.com> wrote in message
news:38E860AB-1A1B-4E06-A215-5FD714C1D06B@microsoft.com...
> Computer starts up OK but now leaves an error message on desktop, (The page
> cannot be displayed.......Cannot find server or DNS Error Internet Explorer).
> The message is in minimized view and cannot be maximized but can be scrolled.
> This has just started happening although the error message can be easily
> cancelled. Everything operates as normal except system has become extremely
> sssslllloooowwwww. I've had no reason to alter the settings in internet
> options but have checked them anyway and can't find anything out of place. I
> have also reset settings to default, but still the same. I'm running '98 SE.
>
> Cheers
> Graham

 

[Graham W.]

Thanks Glee,

Am writing from another PC at moment because mine has gone from slow to
hopeless. One observation running MSINFO32>startup programs, as you
suggested, was the inclusion of "ptsnoop.exe" and
"CountrySelection>pctptt.exe". Nasties??? Not really prepared to transfer
MSINFO32>startup programs to this computer, to send them on, until I'm sure
there's no risk.

Kind Regards

Graham

"glee" wrote:

> You apparently have Internet Explorer set to start with Windows. Try removing it
> temporarily from the startup axis and see what happens.
>
> But before you do that, first do this:
>
> Click Start>Run, type MSINFO32 and click OK.
> In the left pane of the System Information window, click the + sign to expand the
> "Software Environment" category.
> In the left pane, click to select "Startup Programs"....they will appear in a list
> on the right.
> Press Ctrl-A on the keyboard, which will highlight everything in the list on the
> right.
> Press Ctrl-C to copy the list to the 'clipboard'.
> Open a reply to this message, click in the body of the message and press Ctrl-V to
> paste the list from the clipboard to the message, and post back to this thread.
> --
> Glen Ventura, MS MVP Shell/User, A+
> http://dts-l.org/
> http://dts-l.org/goodpost.htm
>
>
> "Graham W." <GrahamW@discussions.microsoft.com> wrote in message
> news:38E860AB-1A1B-4E06-A215-5FD714C1D06B@microsoft.com...
> > Computer starts up OK but now leaves an error message on desktop, (The page
> > cannot be displayed.......Cannot find server or DNS Error Internet Explorer).
> > The message is in minimized view and cannot be maximized but can be scrolled.
> > This has just started happening although the error message can be easily
> > cancelled. Everything operates as normal except system has become extremely
> > sssslllloooowwwww. I've had no reason to alter the settings in internet
> > options but have checked them anyway and can't find anything out of place. I
> > have also reset settings to default, but still the same. I'm running '98 SE.
> >
> > Cheers
> > Graham
>
>

 

[glee]

ptsnoop and pctptt are diagnostic and configuration tools for PCTEL modems. While
there is an old trojan that goes by the name ptsnoop, yours is in conjunction with
pctptt, so is most likely not a trojan.

No need to transfer startup programs to another computer, only a list of them in
Notepad. Follow my earlier instructions but paste the list into Notepad on the
problem computer, then save the text file, and copy that to the other computer via
floppy disk or USB memory stick, and copy/paste the contents of the text file into a
reply here.
--
Glen Ventura, MS MVP Shell/User, A+
http://dts-l.org/
http://dts-l.org/goodpost.htm


"Graham W." <GrahamW@discussions.microsoft.com> wrote in message
news:9B9A70C9-2C1F-4C34-AABD-A38185E4EEC2@microsoft.com...
> Thanks Glee,
>
> Am writing from another PC at moment because mine has gone from slow to
> hopeless. One observation running MSINFO32>startup programs, as you
> suggested, was the inclusion of "ptsnoop.exe" and
> "CountrySelection>pctptt.exe". Nasties??? Not really prepared to transfer
> MSINFO32>startup programs to this computer, to send them on, until I'm sure
> there's no risk.
>
> Kind Regards
>
> Graham
>
> "glee" wrote:
>
>> You apparently have Internet Explorer set to start with Windows. Try removing it
>> temporarily from the startup axis and see what happens.
>>
>> But before you do that, first do this:
>>
>> Click Start>Run, type MSINFO32 and click OK.
>> In the left pane of the System Information window, click the + sign to expand the
>> "Software Environment" category.
>> In the left pane, click to select "Startup Programs"....they will appear in a
>> list
>> on the right.
>> Press Ctrl-A on the keyboard, which will highlight everything in the list on the
>> right.
>> Press Ctrl-C to copy the list to the 'clipboard'.
>> Open a reply to this message, click in the body of the message and press Ctrl-V
>> to
>> paste the list from the clipboard to the message, and post back to this thread.
>> --
>> Glen Ventura, MS MVP Shell/User, A+
>> http://dts-l.org/
>> http://dts-l.org/goodpost.htm
>>
>>
>> "Graham W." <GrahamW@discussions.microsoft.com> wrote in message
>> news:38E860AB-1A1B-4E06-A215-5FD714C1D06B@microsoft.com...
>> > Computer starts up OK but now leaves an error message on desktop, (The page
>> > cannot be displayed.......Cannot find server or DNS Error Internet Explorer).
>> > The message is in minimized view and cannot be maximized but can be scrolled.
>> > This has just started happening although the error message can be easily
>> > cancelled. Everything operates as normal except system has become extremely
>> > sssslllloooowwwww. I've had no reason to alter the settings in internet
>> > options but have checked them anyway and can't find anything out of place. I
>> > have also reset settings to default, but still the same. I'm running '98 SE.
>> >
>> > Cheers
>> > Graham
>>
>>

 

[Graham W.]

Hi "glee"

Please bear in mind that PC was second hand.

Microsoft Office Startup Group "C:\Program Files\Microsoft
Office\Office\OSA9.EXE" -b -l
PowerCam 2.0 Megapixel Monitor Startup Group "C:\Program Files\PowerCam 2.0
Megapixel\ICON.EXE"
Ulead Photo Express 4.0 SE Calendar Checker Startup Group "C:\Program
Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe"
Reboot Startup Group C:\WINDOWS\Start Menu\Programs\StartUp\Reboot.exe
Sonic CinePlayer Quick Launch Startup Group "C:\Program Files\Common
Files\Sonic Shared\cinetray.exe"
Taskbar Display Controls Registry (Per-User Run) RunDLL
deskcp16.dll,QUICKRES_RUNDLLENTRY
dla Registry (Machine Run) C:\WINDOWS\system\dla\tfswctrl.exe
CountrySelection Registry (Machine Run) pctptt.exe
PTSNOOP Registry (Machine Run) ptsnoop.exe
SystemTray Registry (Machine Run) SysTray.Exe
TaskMonitor Registry (Machine Run) C:\WINDOWS\taskmon.exe
LoadPowerProfile Registry (Machine Run) Rundll32.exe
powrprof.dll,LoadCurrentPwrScheme
Winkgr Registry (Machine Run) C:\WINDOWS\SYSTEM\Winkgr.exe
gnetmous Registry (Machine Run) C:\Gmouse\gnetmous.exe
StorageGuard Registry (Machine Run) "C:\Program Files\Common
Files\Sonic\Update Manager\sgtray.exe" /r
BrowserBrand Registry (Machine Run) C:\Program Files\ONLINE~1\XTRA\brand.exe
LoadPowerProfile Registry (Machine Service) Rundll32.exe
powrprof.dll,LoadCurrentPwrScheme
SchedulingAgent Registry (Machine Service) mstask.exe

Graham

"glee" wrote:

> ptsnoop and pctptt are diagnostic and configuration tools for PCTEL modems. While
> there is an old trojan that goes by the name ptsnoop, yours is in conjunction with
> pctptt, so is most likely not a trojan.
>
> No need to transfer startup programs to another computer, only a list of them in
> Notepad. Follow my earlier instructions but paste the list into Notepad on the
> problem computer, then save the text file, and copy that to the other computer via
> floppy disk or USB memory stick, and copy/paste the contents of the text file into a
> reply here.
> --
> Glen Ventura, MS MVP Shell/User, A+
> http://dts-l.org/
> http://dts-l.org/goodpost.htm
>
>
> "Graham W." <GrahamW@discussions.microsoft.com> wrote in message
> news:9B9A70C9-2C1F-4C34-AABD-A38185E4EEC2@microsoft.com...
> > Thanks Glee,
> >
> > Am writing from another PC at moment because mine has gone from slow to
> > hopeless. One observation running MSINFO32>startup programs, as you
> > suggested, was the inclusion of "ptsnoop.exe" and
> > "CountrySelection>pctptt.exe". Nasties??? Not really prepared to transfer
> > MSINFO32>startup programs to this computer, to send them on, until I'm sure
> > there's no risk.
> >
> > Kind Regards
> >
> > Graham
> >
> > "glee" wrote:
> >
> >> You apparently have Internet Explorer set to start with Windows. Try removing it
> >> temporarily from the startup axis and see what happens.
> >>
> >> But before you do that, first do this:
> >>
> >> Click Start>Run, type MSINFO32 and click OK.
> >> In the left pane of the System Information window, click the + sign to expand the
> >> "Software Environment" category.
> >> In the left pane, click to select "Startup Programs"....they will appear in a
> >> list
> >> on the right.
> >> Press Ctrl-A on the keyboard, which will highlight everything in the list on the
> >> right.
> >> Press Ctrl-C to copy the list to the 'clipboard'.
> >> Open a reply to this message, click in the body of the message and press Ctrl-V
> >> to
> >> paste the list from the clipboard to the message, and post back to this thread.
> >> --
> >> Glen Ventura, MS MVP Shell/User, A+
> >> http://dts-l.org/
> >> http://dts-l.org/goodpost.htm
> >>
> >>
> >> "Graham W." <GrahamW@discussions.microsoft.com> wrote in message
> >> news:38E860AB-1A1B-4E06-A215-5FD714C1D06B@microsoft.com...
> >> > Computer starts up OK but now leaves an error message on desktop, (The page
> >> > cannot be displayed.......Cannot find server or DNS Error Internet Explorer).
> >> > The message is in minimized view and cannot be maximized but can be scrolled.
> >> > This has just started happening although the error message can be easily
> >> > cancelled. Everything operates as normal except system has become extremely
> >> > sssslllloooowwwww. I've had no reason to alter the settings in internet
> >> > options but have checked them anyway and can't find anything out of place. I
> >> > have also reset settings to default, but still the same. I'm running '98 SE.
> >> >
> >> > Cheers
> >> > Graham
> >>
> >>
>
>

 

[glee]

You've got one or two trojans, at least, and a bunch of things in your startup group
that just don't need to be there.

Since it is a second-hand machine, why don't you format and start clean with a new
fresh install of Win98? Do you have the Win98 installation CD for this machine?
--
Glen Ventura, MS MVP Shell/User, A+
http://dts-l.org/
http://dts-l.org/goodpost.htm


"Graham W." <GrahamW@discussions.microsoft.com> wrote in message
news:07EC54D7-FA27-44BA-9994-3CF571664C86@microsoft.com...
> Hi "glee"
>
> Please bear in mind that PC was second hand.
>
> Microsoft Office Startup Group "C:\Program Files\Microsoft
> Office\Office\OSA9.EXE" -b -l
> PowerCam 2.0 Megapixel Monitor Startup Group "C:\Program Files\PowerCam 2.0
> Megapixel\ICON.EXE"
> Ulead Photo Express 4.0 SE Calendar Checker Startup Group "C:\Program
> Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe"
> Reboot Startup Group C:\WINDOWS\Start Menu\Programs\StartUp\Reboot.exe
> Sonic CinePlayer Quick Launch Startup Group "C:\Program Files\Common
> Files\Sonic Shared\cinetray.exe"
> Taskbar Display Controls Registry (Per-User Run) RunDLL
> deskcp16.dll,QUICKRES_RUNDLLENTRY
> dla Registry (Machine Run) C:\WINDOWS\system\dla\tfswctrl.exe
> CountrySelection Registry (Machine Run) pctptt.exe
> PTSNOOP Registry (Machine Run) ptsnoop.exe
> SystemTray Registry (Machine Run) SysTray.Exe
> TaskMonitor Registry (Machine Run) C:\WINDOWS\taskmon.exe
> LoadPowerProfile Registry (Machine Run) Rundll32.exe
> powrprof.dll,LoadCurrentPwrScheme
> Winkgr Registry (Machine Run) C:\WINDOWS\SYSTEM\Winkgr.exe
> gnetmous Registry (Machine Run) C:\Gmouse\gnetmous.exe
> StorageGuard Registry (Machine Run) "C:\Program Files\Common
> Files\Sonic\Update Manager\sgtray.exe" /r
> BrowserBrand Registry (Machine Run) C:\Program Files\ONLINE~1\XTRA\brand.exe
> LoadPowerProfile Registry (Machine Service) Rundll32.exe
> powrprof.dll,LoadCurrentPwrScheme
> SchedulingAgent Registry (Machine Service) mstask.exe
>
> Graham
>
> "glee" wrote:
>
>> ptsnoop and pctptt are diagnostic and configuration tools for PCTEL modems.
>> While
>> there is an old trojan that goes by the name ptsnoop, yours is in conjunction
>> with
>> pctptt, so is most likely not a trojan.
>>
>> No need to transfer startup programs to another computer, only a list of them in
>> Notepad. Follow my earlier instructions but paste the list into Notepad on the
>> problem computer, then save the text file, and copy that to the other computer
>> via
>> floppy disk or USB memory stick, and copy/paste the contents of the text file
>> into a
>> reply here.
>> --
>> Glen Ventura, MS MVP Shell/User, A+
>> http://dts-l.org/
>> http://dts-l.org/goodpost.htm
>>
>>
>> "Graham W." <GrahamW@discussions.microsoft.com> wrote in message
>> news:9B9A70C9-2C1F-4C34-AABD-A38185E4EEC2@microsoft.com...
>> > Thanks Glee,
>> >
>> > Am writing from another PC at moment because mine has gone from slow to
>> > hopeless. One observation running MSINFO32>startup programs, as you
>> > suggested, was the inclusion of "ptsnoop.exe" and
>> > "CountrySelection>pctptt.exe". Nasties??? Not really prepared to transfer
>> > MSINFO32>startup programs to this computer, to send them on, until I'm sure
>> > there's no risk.
>> >
>> > Kind Regards
>> >
>> > Graham
>> >
>> > "glee" wrote:
>> >
>> >> You apparently have Internet Explorer set to start with Windows. Try removing
>> >> it
>> >> temporarily from the startup axis and see what happens.
>> >>
>> >> But before you do that, first do this:
>> >>
>> >> Click Start>Run, type MSINFO32 and click OK.
>> >> In the left pane of the System Information window, click the + sign to expand
>> >> the
>> >> "Software Environment" category.
>> >> In the left pane, click to select "Startup Programs"....they will appear in a
>> >> list
>> >> on the right.
>> >> Press Ctrl-A on the keyboard, which will highlight everything in the list on
>> >> the
>> >> right.
>> >> Press Ctrl-C to copy the list to the 'clipboard'.
>> >> Open a reply to this message, click in the body of the message and press
>> >> Ctrl-V
>> >> to
>> >> paste the list from the clipboard to the message, and post back to this
>> >> thread.
>> >> --
>> >> Glen Ventura, MS MVP Shell/User, A+
>> >> http://dts-l.org/
>> >> http://dts-l.org/goodpost.htm
>> >>
>> >>
>> >> "Graham W." <GrahamW@discussions.microsoft.com> wrote in message
>> >> news:38E860AB-1A1B-4E06-A215-5FD714C1D06B@microsoft.com...
>> >> > Computer starts up OK but now leaves an error message on desktop, (The page
>> >> > cannot be displayed.......Cannot find server or DNS Error Internet
>> >> > Explorer).
>> >> > The message is in minimized view and cannot be maximized but can be
>> >> > scrolled.
>> >> > This has just started happening although the error message can be easily
>> >> > cancelled. Everything operates as normal except system has become extremely
>> >> > sssslllloooowwwww. I've had no reason to alter the settings in internet
>> >> > options but have checked them anyway and can't find anything out of place. I
>> >> > have also reset settings to default, but still the same. I'm running '98
>> >> > SE.
>> >> >
>> >> > Cheers
>> >> > Graham
>> >>
>> >>
>>
>>

 

[Graham W.]

Hi "glee",

Sorry, but I'm pretty much out in the cold here. I bid on a '98 SE
installation disk about a month ago, (legal on-line auction), and hopefully
within bounds of MS policies, but missed out at last millisecond. Most have
shifted to XP so '98 is harder to find nowadays in these neck of the woods
leastways.

Cheers

Graham

"glee" wrote:

> You've got one or two trojans, at least, and a bunch of things in your startup group
> that just don't need to be there.
>
> Since it is a second-hand machine, why don't you format and start clean with a new
> fresh install of Win98? Do you have the Win98 installation CD for this machine?
> --
> Glen Ventura, MS MVP Shell/User, A+
> http://dts-l.org/
> http://dts-l.org/goodpost.htm
>
>
> "Graham W." <GrahamW@discussions.microsoft.com> wrote in message
> news:07EC54D7-FA27-44BA-9994-3CF571664C86@microsoft.com...
> > Hi "glee"
> >
> > Please bear in mind that PC was second hand.
> >
> > Microsoft Office Startup Group "C:\Program Files\Microsoft
> > Office\Office\OSA9.EXE" -b -l
> > PowerCam 2.0 Megapixel Monitor Startup Group "C:\Program Files\PowerCam 2.0
> > Megapixel\ICON.EXE"
> > Ulead Photo Express 4.0 SE Calendar Checker Startup Group "C:\Program
> > Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe"
> > Reboot Startup Group C:\WINDOWS\Start Menu\Programs\StartUp\Reboot.exe
> > Sonic CinePlayer Quick Launch Startup Group "C:\Program Files\Common
> > Files\Sonic Shared\cinetray.exe"
> > Taskbar Display Controls Registry (Per-User Run) RunDLL
> > deskcp16.dll,QUICKRES_RUNDLLENTRY
> > dla Registry (Machine Run) C:\WINDOWS\system\dla\tfswctrl.exe
> > CountrySelection Registry (Machine Run) pctptt.exe
> > PTSNOOP Registry (Machine Run) ptsnoop.exe
> > SystemTray Registry (Machine Run) SysTray.Exe
> > TaskMonitor Registry (Machine Run) C:\WINDOWS\taskmon.exe
> > LoadPowerProfile Registry (Machine Run) Rundll32.exe
> > powrprof.dll,LoadCurrentPwrScheme
> > Winkgr Registry (Machine Run) C:\WINDOWS\SYSTEM\Winkgr.exe
> > gnetmous Registry (Machine Run) C:\Gmouse\gnetmous.exe
> > StorageGuard Registry (Machine Run) "C:\Program Files\Common
> > Files\Sonic\Update Manager\sgtray.exe" /r
> > BrowserBrand Registry (Machine Run) C:\Program Files\ONLINE~1\XTRA\brand.exe
> > LoadPowerProfile Registry (Machine Service) Rundll32.exe
> > powrprof.dll,LoadCurrentPwrScheme
> > SchedulingAgent Registry (Machine Service) mstask.exe
> >
> > Graham
> >
> > "glee" wrote:
> >
> >> ptsnoop and pctptt are diagnostic and configuration tools for PCTEL modems.
> >> While
> >> there is an old trojan that goes by the name ptsnoop, yours is in conjunction
> >> with
> >> pctptt, so is most likely not a trojan.
> >>
> >> No need to transfer startup programs to another computer, only a list of them in
> >> Notepad. Follow my earlier instructions but paste the list into Notepad on the
> >> problem computer, then save the text file, and copy that to the other computer
> >> via
> >> floppy disk or USB memory stick, and copy/paste the contents of the text file
> >> into a
> >> reply here.
> >> --
> >> Glen Ventura, MS MVP Shell/User, A+
> >> http://dts-l.org/
> >> http://dts-l.org/goodpost.htm
> >>
> >>
> >> "Graham W." <GrahamW@discussions.microsoft.com> wrote in message
> >> news:9B9A70C9-2C1F-4C34-AABD-A38185E4EEC2@microsoft.com...
> >> > Thanks Glee,
> >> >
> >> > Am writing from another PC at moment because mine has gone from slow to
> >> > hopeless. One observation running MSINFO32>startup programs, as you
> >> > suggested, was the inclusion of "ptsnoop.exe" and
> >> > "CountrySelection>pctptt.exe". Nasties??? Not really prepared to transfer
> >> > MSINFO32>startup programs to this computer, to send them on, until I'm sure
> >> > there's no risk.
> >> >
> >> > Kind Regards
> >> >
> >> > Graham
> >> >
> >> > "glee" wrote:
> >> >
> >> >> You apparently have Internet Explorer set to start with Windows. Try removing
> >> >> it
> >> >> temporarily from the startup axis and see what happens.
> >> >>
> >> >> But before you do that, first do this:
> >> >>
> >> >> Click Start>Run, type MSINFO32 and click OK.
> >> >> In the left pane of the System Information window, click the + sign to expand
> >> >> the
> >> >> "Software Environment" category.
> >> >> In the left pane, click to select "Startup Programs"....they will appear in a
> >> >> list
> >> >> on the right.
> >> >> Press Ctrl-A on the keyboard, which will highlight everything in the list on
> >> >> the
> >> >> right.
> >> >> Press Ctrl-C to copy the list to the 'clipboard'.
> >> >> Open a reply to this message, click in the body of the message and press
> >> >> Ctrl-V
> >> >> to
> >> >> paste the list from the clipboard to the message, and post back to this
> >> >> thread.
> >> >> --
> >> >> Glen Ventura, MS MVP Shell/User, A+
> >> >> http://dts-l.org/
> >> >> http://dts-l.org/goodpost.htm
> >> >>
> >> >>
> >> >> "Graham W." <GrahamW@discussions.microsoft.com> wrote in message
> >> >> news:38E860AB-1A1B-4E06-A215-5FD714C1D06B@microsoft.com...
> >> >> > Computer starts up OK but now leaves an error message on desktop, (The page
> >> >> > cannot be displayed.......Cannot find server or DNS Error Internet
> >> >> > Explorer).
> >> >> > The message is in minimized view and cannot be maximized but can be
> >> >> > scrolled.
> >> >> > This has just started happening although the error message can be easily
> >> >> > cancelled. Everything operates as normal except system has become extremely
> >> >> > sssslllloooowwwww. I've had no reason to alter the settings in internet
> >> >> > options but have checked them anyway and can't find anything out of place. I
> >> >> > have also reset settings to default, but still the same. I'm running '98
> >> >> > SE.
> >> >> >
> >> >> > Cheers
> >> >> > Graham
> >> >>
> >> >>
> >>
> >>
>
>

 

[glee]

Do you have a C:\Windows\Options\Cabs folder on the computer?

If so, it may contain the necessary setup files to install Windows, if you copy the
entire folder contents to a CD. Post back with what is in the folder if you find
it. No need to name all the files, just look for a setup.exe file and a whole lotta
..cab files...count how many there are, and post back.

Also you need to record your Product Key for the current installation. Is it
currently Win98SE?
To get your current Product Key, see here:
http://www.dougknox.com/utility/scripts_desc/productkey.htm


For the possible trojans on your system at the moment:

Follow the procedures here:
http://aumha.org/a/quickfix.htm

If more help is needed after that:

Download HijackThis1.99.1 from one of these locations:
http://downloads.malwareremoval.com/HJTsetup1991.exe
http://www.thespykiller.co.uk/files/HJTsetup.exe
http://security-central.us/downloads/HJTsetup.exe

Installation instructions:
http://forum.malwareremoval.com/viewtopic.php?t=16805

Install, then run HijackThis, and click the Scan button.

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Press that, save the log somewhere you can find it (Desktop, My Documents, or
similar).
Most of what it lists will be harmless or even required, so do NOT fix anything yet.

Copy the log files and paste them into a new post at ONLY ONE of these forums:
http://aumha.net/viewforum.php?f=30
http://forum.malwareremoval.com/viewforum.php?f=11
http://forums.spywareinfo.com/
http://castlecops.com/forum67.html

In your post, please state your problem clearly and what you've done so far to fix
it.

The folks there will tell you what to remove.

See the "housekeeping" they ask you to complete before you post your log:
http://aumha.net/viewtopic.php?t=4075

A tutorial for using Hijack This is located here:
http://tomcoyote.com/hjt/
--
Glen Ventura, MS MVP Shell/User, A+
http://dts-l.org/
http://dts-l.org/goodpost.htm


"Graham W." <GrahamW@discussions.microsoft.com> wrote in message
news:BF95DDFB-2F57-4F7B-AFEF-BE3C2E950E28@microsoft.com...
> Hi "glee",
>
> Sorry, but I'm pretty much out in the cold here. I bid on a '98 SE
> installation disk about a month ago, (legal on-line auction), and hopefully
> within bounds of MS policies, but missed out at last millisecond. Most have
> shifted to XP so '98 is harder to find nowadays in these neck of the woods
> leastways.
>
> Cheers
>
> Graham
>
> "glee" wrote:
>
>> You've got one or two trojans, at least, and a bunch of things in your startup
>> group
>> that just don't need to be there.
>>
>> Since it is a second-hand machine, why don't you format and start clean with a
>> new
>> fresh install of Win98? Do you have the Win98 installation CD for this machine?
>> --
>> Glen Ventura, MS MVP Shell/User, A+
>> http://dts-l.org/
>> http://dts-l.org/goodpost.htm
>>
>>
>> "Graham W." <GrahamW@discussions.microsoft.com> wrote in message
>> news:07EC54D7-FA27-44BA-9994-3CF571664C86@microsoft.com...
>> > Hi "glee"
>> >
>> > Please bear in mind that PC was second hand.
>> >
>> > Microsoft Office Startup Group "C:\Program Files\Microsoft
>> > Office\Office\OSA9.EXE" -b -l
>> > PowerCam 2.0 Megapixel Monitor Startup Group "C:\Program Files\PowerCam 2.0
>> > Megapixel\ICON.EXE"
>> > Ulead Photo Express 4.0 SE Calendar Checker Startup Group "C:\Program
>> > Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe"
>> > Reboot Startup Group C:\WINDOWS\Start Menu\Programs\StartUp\Reboot.exe
>> > Sonic CinePlayer Quick Launch Startup Group "C:\Program Files\Common
>> > Files\Sonic Shared\cinetray.exe"
>> > Taskbar Display Controls Registry (Per-User Run) RunDLL
>> > deskcp16.dll,QUICKRES_RUNDLLENTRY
>> > dla Registry (Machine Run) C:\WINDOWS\system\dla\tfswctrl.exe
>> > CountrySelection Registry (Machine Run) pctptt.exe
>> > PTSNOOP Registry (Machine Run) ptsnoop.exe
>> > SystemTray Registry (Machine Run) SysTray.Exe
>> > TaskMonitor Registry (Machine Run) C:\WINDOWS\taskmon.exe
>> > LoadPowerProfile Registry (Machine Run) Rundll32.exe
>> > powrprof.dll,LoadCurrentPwrScheme
>> > Winkgr Registry (Machine Run) C:\WINDOWS\SYSTEM\Winkgr.exe
>> > gnetmous Registry (Machine Run) C:\Gmouse\gnetmous.exe
>> > StorageGuard Registry (Machine Run) "C:\Program Files\Common
>> > Files\Sonic\Update Manager\sgtray.exe" /r
>> > BrowserBrand Registry (Machine Run) C:\Program Files\ONLINE~1\XTRA\brand.exe
>> > LoadPowerProfile Registry (Machine Service) Rundll32.exe
>> > powrprof.dll,LoadCurrentPwrScheme
>> > SchedulingAgent Registry (Machine Service) mstask.exe
>> >
>> > Graham
>> >
>> > "glee" wrote:
>> >
>> >> ptsnoop and pctptt are diagnostic and configuration tools for PCTEL modems.
>> >> While
>> >> there is an old trojan that goes by the name ptsnoop, yours is in conjunction
>> >> with
>> >> pctptt, so is most likely not a trojan.
>> >>
>> >> No need to transfer startup programs to another computer, only a list of them
>> >> in
>> >> Notepad. Follow my earlier instructions but paste the list into Notepad on
>> >> the
>> >> problem computer, then save the text file, and copy that to the other computer
>> >> via
>> >> floppy disk or USB memory stick, and copy/paste the contents of the text file
>> >> into a
>> >> reply here.
>> >> --
>> >> Glen Ventura, MS MVP Shell/User, A+
>> >> http://dts-l.org/
>> >> http://dts-l.org/goodpost.htm
>> >>
>> >>
>> >> "Graham W." <GrahamW@discussions.microsoft.com> wrote in message
>> >> news:9B9A70C9-2C1F-4C34-AABD-A38185E4EEC2@microsoft.com...
>> >> > Thanks Glee,
>> >> >
>> >> > Am writing from another PC at moment because mine has gone from slow to
>> >> > hopeless. One observation running MSINFO32>startup programs, as you
>> >> > suggested, was the inclusion of "ptsnoop.exe" and
>> >> > "CountrySelection>pctptt.exe". Nasties??? Not really prepared to transfer
>> >> > MSINFO32>startup programs to this computer, to send them on, until I'm sure
>> >> > there's no risk.
>> >> >
>> >> > Kind Regards
>> >> >
>> >> > Graham
>> >> >
>> >> > "glee" wrote:
>> >> >
>> >> >> You apparently have Internet Explorer set to start with Windows. Try
>> >> >> removing
>> >> >> it
>> >> >> temporarily from the startup axis and see what happens.
>> >> >>
>> >> >> But before you do that, first do this:
>> >> >>
>> >> >> Click Start>Run, type MSINFO32 and click OK.
>> >> >> In the left pane of the System Information window, click the + sign to
>> >> >> expand
>> >> >> the
>> >> >> "Software Environment" category.
>> >> >> In the left pane, click to select "Startup Programs"....they will appear in
>> >> >> a
>> >> >> list
>> >> >> on the right.
>> >> >> Press Ctrl-A on the keyboard, which will highlight everything in the list
>> >> >> on
>> >> >> the
>> >> >> right.
>> >> >> Press Ctrl-C to copy the list to the 'clipboard'.
>> >> >> Open a reply to this message, click in the body of the message and press
>> >> >> Ctrl-V
>> >> >> to
>> >> >> paste the list from the clipboard to the message, and post back to this
>> >> >> thread.
>> >> >> --
>> >> >> Glen Ventura, MS MVP Shell/User, A+
>> >> >> http://dts-l.org/
>> >> >> http://dts-l.org/goodpost.htm
>> >> >>
>> >> >>
>> >> >> "Graham W." <GrahamW@discussions.microsoft.com> wrote in message
>> >> >> news:38E860AB-1A1B-4E06-A215-5FD714C1D06B@microsoft.com...
>> >> >> > Computer starts up OK but now leaves an error message on desktop, (The
>> >> >> > page
>> >> >> > cannot be displayed.......Cannot find server or DNS Error Internet
>> >> >> > Explorer).
>> >> >> > The message is in minimized view and cannot be maximized but can be
>> >> >> > scrolled.
>> >> >> > This has just started happening although the error message can be easily
>> >> >> > cancelled. Everything operates as normal except system has become
>> >> >> > extremely
>> >> >> > sssslllloooowwwww. I've had no reason to alter the settings in internet
>> >> >> > options but have checked them anyway and can't find anything out of
>> >> >> > place. I
>> >> >> > have also reset settings to default, but still the same. I'm running '98
>> >> >> > SE.
>> >> >> >
>> >> >> > Cheers
>> >> >> > Graham
>> >> >>
>> >> >>
>> >>
>> >>
>>
>>