AIM Triton not logging

Carol
Guest

AIM Triton not logging Sept 20, 2006 7:58:07 GMT -5

Post by Carol on Sept 20, 2006 7:58:07 GMT -5

I downloaded the latest version of Watch Right and it's not monitoring AIM Triton IM's or internet sessions. Please advise.

BPS SysInfo Report

Processor:
Number Of Processors - 1
Processor Benchmark - 1703

Video:
Horizontal Resolution - 1024 pixels
Vertical Resolution - 768 pixels
Color Depth - 32 bits per pixel (True Color)

Memory (RAM and Free Hard Drive Space):
Percent of Memory in use - 70 % used
Total Physical Memory - 523 MB
Free Physical Memory - 154.828 MB
C:\ - 48485 MB free

Scan\Defrag\Temp Files:
Last Scandisk - 0 days ago
Last Defrag - 0 days ago
Windows Temp Directory Contains 165 files.

Versions:
--------------Applications-------------------

Windows 5.1.2600
Internet Explorer 6.0.2900
America Online .
AIM 0.0.0.0
PowerTools Pro 12 0.0
PowerTools Pro 11 0.0
PowerTools Pro 10 0.0
PowerTools Pro 9 0.0
PowerTools 8 0.0
PowerTools LE1 0.0
PowerTools LE2 0.0
PT Tray 0.0
Addbook Import Stub 0.0
Watch Right 2002.0.0.77
IM Frame 0.0
BPS SysInfo 1.0.52

--------------VB Runtime Files-------------------

C:\WINDOWS\system32\MSVBVM60.dll 6.0.96.90
C:\WINDOWS\system32\OLEAut32.dll 5.1.2600.2180
C:\WINDOWS\system32\OLEPro32.dll 5.1.2600.2180
C:\WINDOWS\system32\AsycFilt.dll 5.1.2600.2180
C:\WINDOWS\system32\stdOLE2.tlb 3.50.5014.0
C:\WINDOWS\system32\MSVCRT.dll 7.0.2600.2180
C:\WINDOWS\system32\MSVCRT40.dll 5.1.2600.2180
C:\WINDOWS\system32\RICHED32.dll 5.1.2600.0

--------------DB Runtime Files-------------------

C:\Program Files\Common Files\Microsoft Shared\DAO\DAO350.DLL 3.51.1608.0
C:\WINDOWS\system32\VB5DB.dll 0.0
C:\WINDOWS\system32\VBAJet32.dll 6.0.1.9431
C:\WINDOWS\system32\EXPSRV.dll 6.0.72.9589
C:\WINDOWS\system32\MSRD2X35.dll 3.51.623.0
C:\WINDOWS\system32\MSREPL35.dll 3.51.3007.1
C:\WINDOWS\system32\MSJet35.dll 3.51.3203.0
C:\WINDOWS\system32\MSJTer35.dll 3.51.623.0
C:\WINDOWS\system32\MSJInt35.dll 3.51.623.0
C:\WINDOWS\system32\MSVCIRT.dll 7.0.2600.2180

--------------DW Runtime Files-------------------

C:\WINDOWS\SYSTEM32\Dwsbc36.ocx 7.0.0.2
C:\WINDOWS\SYSTEM32\Dwshk36.ocx 7.1.0.4
C:\WINDOWS\system32\dwspy36.dll 7.1.0.0

--------------App Runtime Files-------------------

0.0
C:\WINDOWS\SYSTEM32\VSFLEX7L.OCX 7.0.0.78
C:\WINDOWS\system32\Vsflex7d.ocx 0.0
0.0
0.0
C:\WINDOWS\system32\BPSInj36.dll 0.0
0.0
C:\WINDOWS\SYSTEM32\Richtx32.ocx 6.0.88.4
C:\WINDOWS\SYSTEM32\Mscomctl.ocx 6.1.95.45
0.0
0.0
C:\WINDOWS\SYSTEM32\ssa3d30.ocx 3.0.2.3
0.0
0.0
C:\WINDOWS\system32\wmpdxm.dll 10.0.0.3802
C:\WINDOWS\SYSTEM32\XceedZip.dll 4.0.3.13
0.0
---------------------------------

Running Programs (59 total):
[System Process]
System
smss.exe
csrss.exe
winlogon.exe
services.exe
lsass.exe
svchost.exe
svchost.exe
svchost.exe
svchost.exe
svchost.exe
CCSETMGR.EXE
CCEVTMGR.EXE
CCPROXY.EXE
SNDSrvc.exe
SPBBCSvc.exe
symlcsvc.exe
devldr32.exe
explorer.exe
spoolsv.exe
point32.exe
Directcd.exe
DellMMKb.exe
ACMonitor_X83.exe
AcBtnMgr_X83.exe
printray.exe
hpwuSchd2.exe
Nhksrv.exe
AluSchedulerSvc.exe
OSD.exe
CTSVCCDA.EXE
mdm.exe
navapsvc.exe
rundll32.exe
iTunesHelper.exe
qttask.exe
CCAPP.EXE
hpcmpmgr.exe
hpztsb10.exe
aolsoftware.exe
ctfmon.exe
aim.exe
EasyShare.exe
nvsvc32.exe
wweb32.exe
wdfmgr.exe
MsPMSPSv.exe
MSOFFICE.EXE
iPodService.exe
alg.exe
NSCSRVCE.EXE
svchost.exe
msimn.exe
iexplore.exe
iexplore.exe
wrclock.exe
msmsgs.exe
BPSSI1.exe

Startup Programs
NvCplDaemon RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
POINTER point32.exe
AdaptecDirectCD "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
DellTouch C:\WINDOWS\DELLMMKB.EXE
Lexmark X83 Button Monitor C:\PROGRA~1\LEXMAR~1\ACMonitor_X83.exe
Lexmark X83 Button Manager C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X83.exe
PrinTray C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
Windows Service Manager C:\WINDOWS\userint32.exe
HP Software Update "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"
strtas lock1.exe
ImInstaller_IncrediMail C:\DOCUME~1\Mom\LOCALS~1\Temp\ImInstaller\IncrediMail\incredimail_install.exe -startup -product IncrediMail
New.net Startup rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,ClientStartup -s
iTunesHelper "C:\Program Files\iTunes\iTunesHelper.exe"
QuickTime Task "C:\Program Files\QuickTime\qttask.exe" -atboottime
ccApp "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
URLLSTCK.exe "C:\Program Files\Norton Internet Security\UrlLstCk.exe"
HP Component Manager "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
HPDJ Taskbar Utility C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
HostManager C:\Program Files\Common Files\AOL\1157918943\ee\AOLSoftware.exe
IPHSend C:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe
strtas lock1.exe
DESKTOP.INI Startup Group
WordWeb Startup Group

Error Log.txt

stingFile
Description: Object variable or With block variable not set
Number: 91
Source: WatchRight
Version: 2002.0.70

June 2, 2006 04:49 AM
The following error occurred:
App: Watch Right
Module: ListCounts
Description: Automation error
The object invoked has disconnected from its clients.
Number: -2147417848
Source: WatchRight
Version: 2002.0.70

June 2, 2006 04:52 AM
The following error occurred:
App: wrmont
Module: LockZip
Description: Permission denied
Number: 70
Source: wrmont
Version: 2002.0.70

July 24, 2006 07:27 AM
The following error occurred:
App: Watch Right
Module: OpenFile
Description: Set not permitted
Number: 387
Source: WatchRight
Version: 2002.0.70

July 24, 2006 07:27 AM
The following error occurred:
App: Watch Right
Module: OpenFile
Description: File not found
Number: 53
Source: WatchRight
Version: 2002.0.70

July 24, 2006 07:28 AM
The following error occurred:
App: wrmont
Module: LockZip
Description: Permission denied
Number: 70
Source: wrmont
Version: 2002.0.70

August 21, 2006 07:02 AM
The following error occurred:
App: Watch Right
Module: ListCounts
Description: Automation error
The object invoked has disconnected from its clients.
Number: -2147417848
Source: WatchRight
Version: 2002.0.70

August 21, 2006 07:04 AM
The following error occurred:
App: wrmont
Module: LockZip
Description: Permission denied
Number: 70
Source: wrmont
Version: 2002.0.70

August 21, 2006 07:35 AM
The following error occurred:
App: Watch Right
Module: SaveNames
Description: Automation error
The object invoked has disconnected from its clients.
Number: -2147417848
Source: WatchRight
Version: 2002.0.70

August 21, 2006 08:59 AM
The following error occurred:
App: Watch Right
Module: SaveNames
Description: Automation error
The object invoked has disconnected from its clients.
Number: -2147417848
Source: WatchRight
Version: 2002.0.70

Carole
Administrator

Posts: 1,047

AIM Triton not logging Sept 20, 2006 10:52:52 GMT -5

Post by Carole on Sept 20, 2006 10:52:52 GMT -5

Could you please check which exact version/revision of AIM Triton your are currently using? Open the AIM "File" menu, then "Help", and then select "About AIM".

If you are using Triton 1.3.30.1 (which is known as "Triton Preview 1.5",) we are aware of a problem with Watch Right logging IMs with this particular version. We will have a new version of Watch Right available soon to fix this issue.

There is however no known issue with logging internet sessions. I see in your system information that you're using Symantec Norton Antivirus, which mistakingly identifies Watch Right as spyware. You need to set Norton Antivirus (as well as any other antivirus and antispyware programs you might use) to always allow or ignore Watch Right. Once this is done, reinstall Watch Right.

Carol
Guest

AIM Triton not logging Sept 20, 2006 11:19:43 GMT -5

Post by Carol on Sept 20, 2006 11:19:43 GMT -5

Yes, I am using Triton 1.3.30.1 and you're right, there isn't a problem with logging internet sessions, only IM sessions. I'm not quite sure how to set Norton to allow Watch Right, but I will look into it. If you know by chance, could you relay that info. Also, do you know when the new version of Watch Right is coming out? Thank you for your assistance Carole.

Carole
Administrator

Posts: 1,047

AIM Triton not logging Sept 20, 2006 11:46:07 GMT -5

Post by Carole on Sept 20, 2006 11:46:07 GMT -5

Carol said:

I'm not quite sure how to set Norton to allow Watch Right, but I will look into it. If you know by chance, could you relay that info.

I happen to have Norton Antivirus on my system too. You can add Watch Right to the list of Norton's "Exclusions" -- that's in Norton's Options, under "Auto-Protect" > "Exclusions". This will prevent Norton from flagging Watch right as a threat in the future.

Also, do you know when the new version of Watch Right is coming out?

We're currently testing the new version, so I would think it should be available within a few days to a week, unless we run into any unexpected issue.

Carol Guest	AIM Triton not logging Sept 20, 2006 11:58:58 GMT -5 Select Post Deselect Post Link to Post Back to Top Post by Carol on Sept 20, 2006 11:58:58 GMT -5 I excluded Watch Right from the list. Thanks again!

Carol Guest	AIM Triton not logging Sept 25, 2006 7:50:05 GMT -5 Select Post Deselect Post Link to Post Back to Top Post by Carol on Sept 25, 2006 7:50:05 GMT -5 Hi Carole - wondering when the new version of Watch Right will be available. Thanks!

Carole Administrator Posts: 1,047	AIM Triton not logging Sept 25, 2006 11:30:08 GMT -5 Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by Carole on Sept 25, 2006 11:30:08 GMT -5 It's been released today.

Carol
Guest

AIM Triton not logging Oct 6, 2006 9:41:06 GMT -5

Post by Carol on Oct 6, 2006 9:41:06 GMT -5

Carole - I have the new release and it's been working till two days ago. It's no longer logging IM's. Please advise.

Thanks!
Carol

BPS SysInfo Report

Processor:
Number Of Processors - 1
Processor Benchmark - 1688

Video:
Horizontal Resolution - 1024 pixels
Vertical Resolution - 768 pixels
Color Depth - 32 bits per pixel (True Color)

Memory (RAM and Free Hard Drive Space):
Percent of Memory in use - 75 % used
Total Physical Memory - 523 MB
Free Physical Memory - 129.944 MB
C:\ - 47466 MB free

Scan\Defrag\Temp Files:
Last Scandisk - 0 days ago
Last Defrag - 0 days ago
Windows Temp Directory Contains 164 files.

Versions:
--------------Applications-------------------

Windows 5.1.2600
Internet Explorer 6.0.2900
America Online .
AIM 0.0.0.0
PowerTools Pro 12 0.0
PowerTools Pro 11 0.0
PowerTools Pro 10 0.0
PowerTools Pro 9 0.0
PowerTools 8 0.0
PowerTools LE1 0.0
PowerTools LE2 0.0
PT Tray 0.0
Addbook Import Stub 0.0
Watch Right 2002.0.0.79
IM Frame 0.0
BPS SysInfo 1.0.52

--------------VB Runtime Files-------------------

C:\WINDOWS\system32\MSVBVM60.dll 6.0.96.90
C:\WINDOWS\system32\OLEAut32.dll 5.1.2600.2180
C:\WINDOWS\system32\OLEPro32.dll 5.1.2600.2180
C:\WINDOWS\system32\AsycFilt.dll 5.1.2600.2180
C:\WINDOWS\system32\stdOLE2.tlb 3.50.5014.0
C:\WINDOWS\system32\MSVCRT.dll 7.0.2600.2180
C:\WINDOWS\system32\MSVCRT40.dll 5.1.2600.2180
C:\WINDOWS\system32\RICHED32.dll 5.1.2600.0

--------------DB Runtime Files-------------------

C:\Program Files\Common Files\Microsoft Shared\DAO\DAO350.DLL 3.51.1608.0
C:\WINDOWS\system32\VB5DB.dll 0.0
C:\WINDOWS\system32\VBAJet32.dll 6.0.1.9431
C:\WINDOWS\system32\EXPSRV.dll 6.0.72.9589
C:\WINDOWS\system32\MSRD2X35.dll 3.51.623.0
C:\WINDOWS\system32\MSREPL35.dll 3.51.3007.1
C:\WINDOWS\system32\MSJet35.dll 3.51.3203.0
C:\WINDOWS\system32\MSJTer35.dll 3.51.623.0
C:\WINDOWS\system32\MSJInt35.dll 3.51.623.0
C:\WINDOWS\system32\MSVCIRT.dll 7.0.2600.2180

--------------DW Runtime Files-------------------

C:\WINDOWS\SYSTEM32\Dwsbc36.ocx 7.0.0.2
C:\WINDOWS\SYSTEM32\Dwshk36.ocx 7.1.0.4
C:\WINDOWS\system32\dwspy36.dll 7.1.0.0

--------------App Runtime Files-------------------

0.0
C:\WINDOWS\SYSTEM32\VSFLEX7L.OCX 7.0.0.78
C:\WINDOWS\system32\Vsflex7d.ocx 0.0
0.0
0.0
C:\WINDOWS\system32\BPSInj36.dll 0.0
0.0
C:\WINDOWS\SYSTEM32\Richtx32.ocx 6.0.88.4
C:\WINDOWS\SYSTEM32\Mscomctl.ocx 6.1.97.82
0.0
0.0
C:\WINDOWS\SYSTEM32\ssa3d30.ocx 3.0.2.3
0.0
0.0
C:\WINDOWS\system32\wmpdxm.dll 10.0.0.3802
C:\WINDOWS\SYSTEM32\XceedZip.dll 4.0.3.13
0.0
---------------------------------

Running Programs (58 total):
[System Process]
System
smss.exe
csrss.exe
winlogon.exe
services.exe
lsass.exe
svchost.exe
svchost.exe
svchost.exe
svchost.exe
svchost.exe
CCSETMGR.EXE
CCEVTMGR.EXE
CCPROXY.EXE
SNDSrvc.exe
SPBBCSvc.exe
symlcsvc.exe
devldr32.exe
explorer.exe
spoolsv.exe
point32.exe
Directcd.exe
DellMMKb.exe
ACMonitor_X83.exe
AcBtnMgr_X83.exe
printray.exe
hpwuSchd2.exe
Nhksrv.exe
AluSchedulerSvc.exe
OSD.exe
rundll32.exe
iTunesHelper.exe
qttask.exe
CCAPP.EXE
CTSVCCDA.EXE
hpcmpmgr.exe
hpztsb10.exe
aolsoftware.exe
mdm.exe
ctfmon.exe
navapsvc.exe
EasyShare.exe
nvsvc32.exe
wweb32.exe
wdfmgr.exe
MsPMSPSv.exe
MSOFFICE.EXE
iPodService.exe
alg.exe
NSCSRVCE.EXE
svchost.exe
wrclock.exe
aim.exe
msimn.exe
iexplore.exe
msmsgs.exe
BPSSI1.exe

Startup Programs
NvCplDaemon RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
POINTER point32.exe
AdaptecDirectCD "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
DellTouch C:\WINDOWS\DELLMMKB.EXE
Lexmark X83 Button Monitor C:\PROGRA~1\LEXMAR~1\ACMonitor_X83.exe
Lexmark X83 Button Manager C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X83.exe
PrinTray C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
Windows Service Manager C:\WINDOWS\userint32.exe
HP Software Update "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"
strtas lock1.exe
ImInstaller_IncrediMail C:\DOCUME~1\Mom\LOCALS~1\Temp\ImInstaller\IncrediMail\incredimail_install.exe -startup -product IncrediMail
New.net Startup rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,ClientStartup -s
iTunesHelper "C:\Program Files\iTunes\iTunesHelper.exe"
QuickTime Task "C:\Program Files\QuickTime\qttask.exe" -atboottime
ccApp "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
URLLSTCK.exe "C:\Program Files\Norton Internet Security\UrlLstCk.exe"
HP Component Manager "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
HPDJ Taskbar Utility C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
HostManager C:\Program Files\Common Files\AOL\1157918943\ee\AOLSoftware.exe
IPHSend C:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe
strtas lock1.exe
DESKTOP.INI Startup Group
WordWeb Startup Group

Error Log.txt

stingFile
Description: Object variable or With block variable not set
Number: 91
Source: WatchRight
Version: 2002.0.70

June 2, 2006 04:49 AM
The following error occurred:
App: Watch Right
Module: ListCounts
Description: Automation error
The object invoked has disconnected from its clients.
Number: -2147417848
Source: WatchRight
Version: 2002.0.70

June 2, 2006 04:52 AM
The following error occurred:
App: wrmont
Module: LockZip
Description: Permission denied
Number: 70
Source: wrmont
Version: 2002.0.70

July 24, 2006 07:27 AM
The following error occurred:
App: Watch Right
Module: OpenFile
Description: Set not permitted
Number: 387
Source: WatchRight
Version: 2002.0.70

July 24, 2006 07:27 AM
The following error occurred:
App: Watch Right
Module: OpenFile
Description: File not found
Number: 53
Source: WatchRight
Version: 2002.0.70

July 24, 2006 07:28 AM
The following error occurred:
App: wrmont
Module: LockZip
Description: Permission denied
Number: 70
Source: wrmont
Version: 2002.0.70

August 21, 2006 07:02 AM
The following error occurred:
App: Watch Right
Module: ListCounts
Description: Automation error
The object invoked has disconnected from its clients.
Number: -2147417848
Source: WatchRight
Version: 2002.0.70

August 21, 2006 07:04 AM
The following error occurred:
App: wrmont
Module: LockZip
Description: Permission denied
Number: 70
Source: wrmont
Version: 2002.0.70

August 21, 2006 07:35 AM
The following error occurred:
App: Watch Right
Module: SaveNames
Description: Automation error
The object invoked has disconnected from its clients.
Number: -2147417848
Source: WatchRight
Version: 2002.0.70

August 21, 2006 08:59 AM
The following error occurred:
App: Watch Right
Module: SaveNames
Description: Automation error
The object invoked has disconnected from its clients.
Number: -2147417848
Source: WatchRight
Version: 2002.0.70

jeromy
Global Moderator

Posts: 2,137

AIM Triton not logging Oct 6, 2006 22:16:35 GMT -5

Post by jeromy on Oct 6, 2006 22:16:35 GMT -5

I noticed from your system information report, the wrexec.exe file is not running. This is the file that does the actual 'logging' for Watch Right. If WR is set to log this file should be a running process.
Typically, when this program isn't found to be active it is due to the fact that some spyware/virus software on your computer has prevented it from loading.

Please check your Antivirus and Spyware programs to see if they are preventing Watch Right from working effectively.

Let us know your results. Thanks!

I no longer check these boards.
---
Useful Links:
Download BPS Software programs
Download old AOL versions
Backup PT files & Reg Info

Carol
Guest

AIM Triton not logging Oct 8, 2006 14:09:37 GMT -5

Post by Carol on Oct 8, 2006 14:09:37 GMT -5

Thanks Rocky. I don't have any spyware programs running and I've checked my anti-virus program. It doesn't seem to be preventing WR from running from what I can see. I reinstalled Watch Right to see if that made a difference. I noticed that some IM's are being logged now but not all of them.

jeromy Global Moderator Posts: 2,137	AIM Triton not logging Oct 9, 2006 23:11:03 GMT -5 Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by jeromy on Oct 9, 2006 23:11:03 GMT -5 Try resetting Watch Right. Launch Watch Right, click on Options > Reset Watch Right. NOTE: Make certain you print any logs you wish to save. Resetting Watch Right will erase any current logs.
	I no longer check these boards. --- Useful Links: Download BPS Software programs Download old AOL versions Backup PT files & Reg Info

Carol Guest	AIM Triton not logging Oct 12, 2006 7:02:09 GMT -5 Select Post Deselect Post Link to Post Back to Top Post by Carol on Oct 12, 2006 7:02:09 GMT -5 I reset Watch Right. Not all IM's are being logged. I noticed my daughter did not sign off of her AIM and close it. Would that prevent the IM's from being logged?

jeromy Global Moderator Posts: 2,137	AIM Triton not logging Oct 12, 2006 9:47:36 GMT -5 Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by jeromy on Oct 12, 2006 9:47:36 GMT -5 It's been almost a week since you've posted the last BPS System Information Report, would you mind posting another one? If your daughter isn't closing Watch Right, that shouldn't prevent WR from logging any conversations she had.
	I no longer check these boards. --- Useful Links: Download BPS Software programs Download old AOL versions Backup PT files & Reg Info

Carol
Guest

AIM Triton not logging Oct 12, 2006 12:52:36 GMT -5

Post by Carol on Oct 12, 2006 12:52:36 GMT -5

Here's the report as requested.

BPS SysInfo Report

Processor:
Number Of Processors - 1
Processor Benchmark - 1750

Video:
Horizontal Resolution - 1024 pixels
Vertical Resolution - 768 pixels
Color Depth - 32 bits per pixel (True Color)

Memory (RAM and Free Hard Drive Space):
Percent of Memory in use - 75 % used
Total Physical Memory - 523 MB
Free Physical Memory - 130.116 MB
C:\ - 47027 MB free

Scan\Defrag\Temp Files:
Last Scandisk - 0 days ago
Last Defrag - 0 days ago
Windows Temp Directory Contains 164 files.

Versions:
--------------Applications-------------------

Windows 5.1.2600
Internet Explorer 6.0.2900
America Online .
AIM 0.0.0.0
PowerTools Pro 12 0.0
PowerTools Pro 11 0.0
PowerTools Pro 10 0.0
PowerTools Pro 9 0.0
PowerTools 8 0.0
PowerTools LE1 0.0
PowerTools LE2 0.0
PT Tray 0.0
Addbook Import Stub 0.0
Watch Right 2002.0.0.79
IM Frame 0.0
BPS SysInfo 1.0.52

--------------VB Runtime Files-------------------

C:\WINDOWS\system32\MSVBVM60.dll 6.0.96.90
C:\WINDOWS\system32\OLEAut32.dll 5.1.2600.2180
C:\WINDOWS\system32\OLEPro32.dll 5.1.2600.2180
C:\WINDOWS\system32\AsycFilt.dll 5.1.2600.2180
C:\WINDOWS\system32\stdOLE2.tlb 3.50.5014.0
C:\WINDOWS\system32\MSVCRT.dll 7.0.2600.2180
C:\WINDOWS\system32\MSVCRT40.dll 5.1.2600.2180
C:\WINDOWS\system32\RICHED32.dll 5.1.2600.0

--------------DB Runtime Files-------------------

C:\Program Files\Common Files\Microsoft Shared\DAO\DAO350.DLL 3.51.1608.0
C:\WINDOWS\system32\VB5DB.dll 0.0
C:\WINDOWS\system32\VBAJet32.dll 6.0.1.9431
C:\WINDOWS\system32\EXPSRV.dll 6.0.72.9589
C:\WINDOWS\system32\MSRD2X35.dll 3.51.623.0
C:\WINDOWS\system32\MSREPL35.dll 3.51.3007.1
C:\WINDOWS\system32\MSJet35.dll 3.51.3203.0
C:\WINDOWS\system32\MSJTer35.dll 3.51.623.0
C:\WINDOWS\system32\MSJInt35.dll 3.51.623.0
C:\WINDOWS\system32\MSVCIRT.dll 7.0.2600.2180

--------------DW Runtime Files-------------------

C:\WINDOWS\SYSTEM32\Dwsbc36.ocx 7.0.0.2
C:\WINDOWS\SYSTEM32\Dwshk36.ocx 7.1.0.4
C:\WINDOWS\system32\dwspy36.dll 7.1.0.0

--------------App Runtime Files-------------------

0.0
C:\WINDOWS\SYSTEM32\VSFLEX7L.OCX 7.0.0.78
C:\WINDOWS\system32\Vsflex7d.ocx 0.0
0.0
0.0
C:\WINDOWS\system32\BPSInj36.dll 0.0
0.0
C:\WINDOWS\SYSTEM32\Richtx32.ocx 6.0.88.4
C:\WINDOWS\SYSTEM32\Mscomctl.ocx 6.1.97.82
0.0
0.0
C:\WINDOWS\SYSTEM32\ssa3d30.ocx 3.0.2.3
0.0
0.0
C:\WINDOWS\system32\wmpdxm.dll 10.0.0.3802
C:\WINDOWS\SYSTEM32\XceedZip.dll 4.0.3.13
0.0
---------------------------------

Running Programs (55 total):
[System Process]
System
smss.exe
csrss.exe
winlogon.exe
services.exe
lsass.exe
svchost.exe
svchost.exe
svchost.exe
svchost.exe
svchost.exe
CCSETMGR.EXE
CCEVTMGR.EXE
CCPROXY.EXE
SNDSrvc.exe
SPBBCSvc.exe
symlcsvc.exe
spoolsv.exe
devldr32.exe
explorer.exe
point32.exe
Directcd.exe
DellMMKb.exe
ACMonitor_X83.exe
AcBtnMgr_X83.exe
printray.exe
hpwuSchd2.exe
AluSchedulerSvc.exe
OSD.exe
CTSVCCDA.EXE
mdm.exe
navapsvc.exe
nvsvc32.exe
wdfmgr.exe
MsPMSPSv.exe
rundll32.exe
iTunesHelper.exe
qttask.exe
CCAPP.EXE
hpcmpmgr.exe
hpztsb10.exe
aolsoftware.exe
ctfmon.exe
EasyShare.exe
wweb32.exe
iPodService.exe
alg.exe
MSOFFICE.EXE
svchost.exe
NSCSRVCE.EXE
iexplore.exe
wrclock.exe
aim.exe
BPSSI1.exe

Startup Programs
NvCplDaemon RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
POINTER point32.exe
AdaptecDirectCD "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
DellTouch C:\WINDOWS\DELLMMKB.EXE
Lexmark X83 Button Monitor C:\PROGRA~1\LEXMAR~1\ACMonitor_X83.exe
Lexmark X83 Button Manager C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X83.exe
PrinTray C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
Windows Service Manager C:\WINDOWS\userint32.exe
HP Software Update "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"
strtas lock1.exe
ImInstaller_IncrediMail C:\DOCUME~1\Mom\LOCALS~1\Temp\ImInstaller\IncrediMail\incredimail_install.exe -startup -product IncrediMail
New.net Startup rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,ClientStartup -s
iTunesHelper "C:\Program Files\iTunes\iTunesHelper.exe"
QuickTime Task "C:\Program Files\QuickTime\qttask.exe" -atboottime
ccApp "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
URLLSTCK.exe "C:\Program Files\Norton Internet Security\UrlLstCk.exe"
HP Component Manager "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
HPDJ Taskbar Utility C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
HostManager C:\Program Files\Common Files\AOL\1157918943\ee\AOLSoftware.exe
IPHSend C:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe
strtas lock1.exe
DESKTOP.INI Startup Group
WordWeb Startup Group

Error Log.txt

stingFile
Description: Object variable or With block variable not set
Number: 91
Source: WatchRight
Version: 2002.0.70

June 2, 2006 04:49 AM
The following error occurred:
App: Watch Right
Module: ListCounts
Description: Automation error
The object invoked has disconnected from its clients.
Number: -2147417848
Source: WatchRight
Version: 2002.0.70

June 2, 2006 04:52 AM
The following error occurred:
App: wrmont
Module: LockZip
Description: Permission denied
Number: 70
Source: wrmont
Version: 2002.0.70

July 24, 2006 07:27 AM
The following error occurred:
App: Watch Right
Module: OpenFile
Description: Set not permitted
Number: 387
Source: WatchRight
Version: 2002.0.70

July 24, 2006 07:27 AM
The following error occurred:
App: Watch Right
Module: OpenFile
Description: File not found
Number: 53
Source: WatchRight
Version: 2002.0.70

July 24, 2006 07:28 AM
The following error occurred:
App: wrmont
Module: LockZip
Description: Permission denied
Number: 70
Source: wrmont
Version: 2002.0.70

August 21, 2006 07:02 AM
The following error occurred:
App: Watch Right
Module: ListCounts
Description: Automation error
The object invoked has disconnected from its clients.
Number: -2147417848
Source: WatchRight
Version: 2002.0.70

August 21, 2006 07:04 AM
The following error occurred:
App: wrmont
Module: LockZip
Description: Permission denied
Number: 70
Source: wrmont
Version: 2002.0.70

August 21, 2006 07:35 AM
The following error occurred:
App: Watch Right
Module: SaveNames
Description: Automation error
The object invoked has disconnected from its clients.
Number: -2147417848
Source: WatchRight
Version: 2002.0.70

August 21, 2006 08:59 AM
The following error occurred:
App: Watch Right
Module: SaveNames
Description: Automation error
The object invoked has disconnected from its clients.
Number: -2147417848
Source: WatchRight
Version: 2002.0.70

jeromy
Global Moderator

Posts: 2,137

AIM Triton not logging Oct 18, 2006 0:28:41 GMT -5

Post by jeromy on Oct 18, 2006 0:28:41 GMT -5

Thank you for posting the updated report.
It appears you have a rootkit viral infection on your system:

strtas lock1.exe

Information can be viewed here about this particular file:
www.castlecops.com/s11625-strtas.html

Use Trojan Remover, www.simplysup.com, and allow it to scan your system for known files.
Trojan Remover is not free, but it does come with a full trial period -- you can use this trial period to scan your system.

Last Edit: Oct 18, 2006 0:29:43 GMT -5 by jeromy

I no longer check these boards.
---
Useful Links:
Download BPS Software programs
Download old AOL versions
Backup PT files & Reg Info

Post by Carol on Sept 20, 2006 7:58:07 GMT -5

Post by Carole on Sept 20, 2006 10:52:52 GMT -5

Post by Carol on Sept 20, 2006 11:19:43 GMT -5

Post by Carole on Sept 20, 2006 11:46:07 GMT -5

Post by Carol on Sept 20, 2006 11:58:58 GMT -5

Post by Carol on Sept 25, 2006 7:50:05 GMT -5

Post by Carole on Sept 25, 2006 11:30:08 GMT -5

Post by Carol on Oct 6, 2006 9:41:06 GMT -5

Post by jeromy on Oct 6, 2006 22:16:35 GMT -5

Post by Carol on Oct 8, 2006 14:09:37 GMT -5

Post by jeromy on Oct 9, 2006 23:11:03 GMT -5

Post by Carol on Oct 12, 2006 7:02:09 GMT -5

Post by jeromy on Oct 12, 2006 9:47:36 GMT -5

Post by Carol on Oct 12, 2006 12:52:36 GMT -5

Post by jeromy on Oct 18, 2006 0:28:41 GMT -5