Jump to content


Photo

MSI command line parmeters running on startup?


  • Please log in to reply
1 reply to this topic

#1 rpwarwood

rpwarwood

    Member

  • New Member
  • Pip
  • 2 posts

Posted 29 June 2004 - 05:14 PM

I'm fairly certain its not a virus, but for the last week or so everytime i restart or turn on my computer i get a pop up box giving me some command line parameters for an MSI product. They include the following:

/ua : Specify URL for InstMsiA.exe
/uw : Specify URL for InstMsiW.exe
/us : Specify URL to ISScript.msi
/v : Pass arguments to Msiexec

and others but i forget what they are. I do not have a clue where it wants me to use these or what purpose they serve but has anyone got any idea as to how i can stop this popup appearing everytime i turn my comptuer on?

The only MSI prodcut i have is a bluetooth dongle, but i installed that over 2months ago and this has only started happening within the last week.

I will post my hijack this log, just incase i have any other obvious viruses that someone may know about.

Thanks in advance for any replies :) and apologies for not knowing what im doing.

Hijackthis log:

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\NavNT\defwatch.exe
C:\Program Files\NavNT\rtvscan.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\MsgSys.EXE
C:\WINDOWS\System32\sstray.exe
C:\Program Files\NavNT\vptray.exe
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\MICROS~4\GAMECO~1\STRATE~1\daemon14.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ASUS\Probe\AsusProb.exe
C:\WINDOWS\System32\RUNDLL32.exe
C:\Program Files\MICROSTAR\Bluetooth Software\BTTray.exe
C:\Program Files\MICROSTAR\Bluetooth Software\BTStackServer.exe

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.1629.0\en-gb\msntb.dll
O4 - HKLM\..\Run: [TCASUTIEXE] TCAUDIAG.EXE -off
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [WinCast] D:\SETUP.EXE -leng
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Daemon14] C:\PROGRA~1\MICROS~4\GAMECO~1\STRATE~1\daemon14.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaEngineMain
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.r...ip/RdxIE601.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupd...8034.3704976852

#2 rpwarwood

rpwarwood

    Member

  • New Member
  • Pip
  • 2 posts

Posted 02 July 2004 - 10:12 AM

Any ideas people, it is extremely annoying to have this appear every time i turn my computer on. If anyone has an MSI bluetooth product or knows what program the command line parameters are referring to it would be helpful. Thanks again.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button