Since net.exe is a command-line utility, there's no good reason why it should be running periodically. More often than not, symptoms like that suggest that there's spyware/malware present on the machine.
Here's how to proceed...
First, make sure your antivirus software definitions are current, and scan your system for viruses. If that doesn't resolve the problem, download, install, update and run Ad-Aware and Spybot as described in
this article.
If the problem still isn't resolved, download
HijackThis, a malware analysis and removal tool. Create a directory (folder) in the root level of your C: drive named HJT. Unzip HijackThis.zip into the newly created directory.
After installing HijackThis.exe in the directory C:\HJT, run Hijackthis from that directory. Click on the 'scan' button and then 'save log' button. Save the file in the directory C:\HJT. Use a name like HijackThis.txt.
Copy and paste the contents of the log you saved in a new message in the
Virus and Trojan Removals board at TomCoyote.org for review by certified volunteer experts.
Registration is required before posting. Be sure to describe the problem you're experiencing.
DON'T ATTEMPT TO FIX ANYTHING REPORTED BY HIJACKTHIS without expert advice!
There are lots more people with malware problems they haven't been able to resolve than there are expert HijackThis analysts, so please be patient. See
this post by ChrisRLG for other sites available for analyzing your HijackThis log.
i get the application error 0xc0000124 too! only for me it happens after using my computer for about 15 mins. then it wont let me open or use anything, then i have to restart it and use for 15 mins. and restart, plz help!! whats going on, i dont have messenger blocker or killer that i know of
ok, theres one thing i didnt exactly specify, it isnt net.exe. its whatever i try to open for example: if i try to open internet explorer it will say, iexplorer.exe application error 0xc0000142, i dont know if this changes anything, i have run spybot and adaware, but i have to run my antivirus program
ok, theres one thing i didnt exactly specify, it isnt net.exe.
That can happen if you reply in a thread that's describing a different problem. The advice I posted is a general approach to eradicating virus/spyware/malware problems, so it still applies.
...iexplorer.exe...
Was the name of the program
iexplorer.exe or
iexplore.exe?
iexplorer.exe is a known Trojan.
the iexplorer.exe was just an example, it happens with everything i try to open, like if i wanted to open microsoft money works, it would say something like mmw.exe, its something for each program
OK, as long as it said "iexplore.exe", not "iexplorer.exe". Are you making any progress? Did this problem begin suddenly? If it did, you may be able to restore the system to a date before the problem began using "System Restore".
If it began after the reinstall, there may be problems remaining from then, especially given that there are many programs involved. You may want to try doing an XP "Repair Install", as described in
this article.
it actually began when i had my computer fixed and had windows reinstalled, its done that ever since, so there is no previous restore point, i was going to try that
Your log is incomplete. Be sure to copy the entire log into a message. See this note if you're not sure how to do that.
Before you post (see below), check first to be sure you have the current version of HijackThis - it's 1.98.2. If that's not the version you have, please download the latest version here.
volcano11
2 Intern
•
28K Posts
0
July 28th, 2004 01:00
Are you running a program called Messenger Blocker? If so, try uninstalling that and see if the error goes away.
Steve
volcano11
2 Intern
•
28K Posts
0
July 28th, 2004 01:00
You do not need a program to stop Messenger Service pop-ups. You just need to disable the service in Windows XP. See the following:
http://www.microsoft.com/windowsxp/using/security/learnmore/stopspam.mspx
Steve
Cami68
12 Posts
0
July 28th, 2004 01:00
Cami
Cami68
12 Posts
0
July 28th, 2004 02:00
Thanks again!
Cami
jwatt
4.4K Posts
0
August 15th, 2004 19:00
Here's how to proceed...
First, make sure your antivirus software definitions are current, and scan your system for viruses. If that doesn't resolve the problem, download, install, update and run Ad-Aware and Spybot as described in this article.
If the problem still isn't resolved, download HijackThis, a malware analysis and removal tool. Create a directory (folder) in the root level of your C: drive named HJT. Unzip HijackThis.zip into the newly created directory.
After installing HijackThis.exe in the directory C:\HJT, run Hijackthis from that directory. Click on the 'scan' button and then 'save log' button. Save the file in the directory C:\HJT. Use a name like HijackThis.txt.
Copy and paste the contents of the log you saved in a new message in the Virus and Trojan Removals board at TomCoyote.org for review by certified volunteer experts. Registration is required before posting. Be sure to describe the problem you're experiencing. DON'T ATTEMPT TO FIX ANYTHING REPORTED BY HIJACKTHIS without expert advice!
There are lots more people with malware problems they haven't been able to resolve than there are expert HijackThis analysts, so please be patient. See this post by ChrisRLG for other sites available for analyzing your HijackThis log.
Jim
bballplaya0032
5 Posts
0
August 15th, 2004 19:00
i get the application error 0xc0000124 too! only for me it happens after using my computer for about 15 mins. then it wont let me open or use anything, then i have to restart it and use for 15 mins. and restart, plz help!! whats going on, i dont have messenger blocker or killer that i know of
bballplaya0032
5 Posts
0
August 15th, 2004 19:00
jwatt
4.4K Posts
0
August 15th, 2004 19:00
That can happen if you reply in a thread that's describing a different problem. The advice I posted is a general approach to eradicating virus/spyware/malware problems, so it still applies.
...iexplorer.exe...
Was the name of the program iexplorer.exe or iexplore.exe? iexplorer.exe is a known Trojan.
Jim
bballplaya0032
5 Posts
0
August 15th, 2004 20:00
jwatt
4.4K Posts
0
August 15th, 2004 20:00
Jim
jwatt
4.4K Posts
0
August 15th, 2004 22:00
Jim
bballplaya0032
5 Posts
0
August 15th, 2004 22:00
bballplaya0032
5 Posts
0
August 22nd, 2004 23:00
ok, i ran hijack this, this is the log file, tell me if there is anything suspicious, thanx
O2 - BHO: MyQuickSearch Search Assistant BHO - {04011C11-2F3B-44ed-977C-270CA669C6B2} - C:\Program Files\MyQuickSearch\SrchAstt\1.bin\MQSSRCAS.DLL
O2 - BHO: mqsBar BHO - {0E677221-E309-4341-81BD-3CC3018BF5B3} - C:\Program Files\MyQuickSearch\bar\1.bin\MQSBAR.DLL
O2 - BHO: QuickSearch Search Bar - {82315A18-6CFB-44a7-BDFD-90E36537C252} - C:\Program Files\QuickSearch\QuickSearchBar1_27.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: QuickSearch Search Bar - {82315A18-6CFB-44a7-BDFD-90E36537C252} - C:\Program Files\QuickSearch\QuickSearchBar1_27.dll
O3 - Toolbar: My &Quick Search - {0E677229-E309-4341-81BD-3CC3018BF5B3} - C:\Program Files\MyQuickSearch\bar\1.bin\MQSBAR.DLL
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe
O4 - HKLM\..\Run: [HotkeyApp] C:\Program Files\Launch Manager\HotkeyApp.exe
O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe
O4 - HKLM\..\Run: [LMgrPanelICON] C:\Program Files\Launch Manager\PanelICON.exe
O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaEngineMain
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKCU\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - Global Startup: LimeWire 4.0.8.lnk = C:\Program Files\LimeWire\LimeWire 4.0.8\LimeWire.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab28578.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://support.gateway.com/support/profiler/PCPitStop.CAB
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab28578.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab28578.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab28578.cab
O16 - DPF: {9AA73F41-EC64-489E-9A73-9CD52E528BC4} (ZoneAxRcMgr Class) - http://messenger.zone.msn.com/binary/ZAxRcMgr.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab28578.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab30149.cab
O16 - DPF: {F54C1137-5E34-4B95-95A5-BA56D4D8D743} (Secure Delivery) - http://www.gamespot.com/KDX/kdx.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab30149.cab
jwatt
4.4K Posts
0
August 23rd, 2004 00:00
bballplaya0032,
Your log is incomplete. Be sure to copy the entire log into a message. See this note if you're not sure how to do that.
Before you post (see below), check first to be sure you have the current version of HijackThis - it's 1.98.2. If that's not the version you have, please download the latest version here.
As I suggested, please register at TomCoyote.org and post your log in the Virus and Trojan Removals board at TomCoyote.org for review by certified volunteer experts. Be sure describe the problem you're experiencing.
Jim