my copy/paste operation invalid!

[gogole]

After cleaning my computer using the latest 1.25 version, my all copy/paste operations in Explorer are invalid, whether Ctrl+C/V or by menu. It does not work at all!!

First I doubt the virsus. but I cannot find any virsus using Mcafee VirusScan with the latest virus database. It's also impossible by the windows system bug(blast). my computer is Windows 2000 with SP4.

 

Is it possible to cause by CCleaner?

 

Appreciate to get your reply asap.

 

thank you.

[rridgely]

No, CCleaner has never broken the copy and paste function. Do you think you have a virus? Download this and choose scan and save log file. Then upload the log to the forum since you cant copy and paste.

 

Hijack This

http://www.majorgeeks.com/download3155.html

[gogole]

i've done it.

 

Logfile of HijackThis v1.99.1

Scan saved at 09:34:23, on 2005-11-04

Platform: Windows 2000 SP4 (WinNT 5.00.2195)

MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

 

Running processes:

C:\WINNT\System32\smss.exe

C:\WINNT\system32\winlogon.exe

C:\WINNT\system32\services.exe

C:\WINNT\system32\lsass.exe

C:\WINNT\system32\ibmpmsvc.exe

C:\WINNT\system32\svchost.exe

C:\WINNT\System32\svchost.exe

C:\WINNT\system32\spoolsv.exe

C:\WINNT\system32\Ati2evxx.exe

C:\WINNT\system32\spool\DRIVERS\W32X86\3\fpdisp5a.exe

C:\PROGRA~1\NETWOR~1\MCAFEE~1\FireSvc.exe

C:\WINNT\System32\llssrv.exe

C:\Program Files\Network Associates\Common Framework\FrameworkService.exe

C:\Program Files\Network Associates\VirusScan\Mcshield.exe

C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe

C:\Inetpub\MySQL\bin\mysqld-nt.exe

C:\WINNT\system32\regsvc.exe

C:\WINNT\system32\MSTask.exe

C:\WINNT\system32\stisvc.exe

C:\WINNT\System32\WBEM\WinMgmt.exe

C:\WINNT\system32\mspmspsv.exe

C:\WINNT\system32\svchost.exe

C:\WINNT\system32\Dfssvc.exe

C:\WINNT\System32\inetsrv\inetinfo.exe

C:\WINNT\System32\msdtc.exe

C:\WINNT\System32\svchost.exe

C:\WINNT\System32\svchost.exe

C:\WINNT\Explorer.EXE

C:\WINNT\system32\tp4mon.exe

C:\WINNT\AGRSMMSG.exe

C:\Program Files\TransDesktop\TransDesktop.exe

C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe

C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe

C:\WINNT\system32\spool\DRIVERS\W32X86\3\fpdisp5a.exe

C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE

C:\PROGRA~1\NETWOR~1\MCAFEE~1\Firetray.exe

C:\WINNT\system32\RunDll32.exe

C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe

D:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE

C:\WINNT\system32\internat.exe

C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe

C:\Inetpub\Apache Group\Apache2\bin\ApacheMonitor.exe

D:\Program Files\Maxthon\Maxthon.exe

D:\Program Files\Foxmail\Foxmail.exe

C:\WINNT\system32\PYINTAU.EXE

C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE

E:\temp\hijackthis\HijackThis.exe

 

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - D:\PROGRA~1\FlashGet\jccatch.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll

O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll

O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - D:\PROGRA~1\FLASHF~1.02B\IEFlash.dll

O3 - Toolbar: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx

O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll

O4 - HKLM\..\Run: [TrackPointSrv] tp4mon.exe

O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe

O4 - HKLM\..\Run: [TransDesktop] C:\Program Files\TransDesktop\TransDesktop.exe /AUTOSET

O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey

O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe"

O4 - HKLM\..\Run: [bMMLREF] D:\Program Files\ThinkPad\Utilities\BMMLREF.EXE

O4 - HKLM\..\Run: [bMMMONWND] rundll32.exe D:\PROGRA~1\ThinkPad\UTILIT~1\BatInfEx.dll,BMMAutonomicMonitor

O4 - HKLM\..\Run: [FinePrint 分配器 v5] "C:\WINNT\system32\spool\DRIVERS\W32X86\3\fpdisp5a.exe" /source=HKLM

O4 - HKLM\..\Run: [shStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE

O4 - HKLM\..\Run: [McAfeeFireTray] C:\PROGRA~1\NETWOR~1\MCAFEE~1\Firetray.exe

O4 - HKLM\..\Run: [bMMGAG] RunDll32 D:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll,StartPwrMonitor

O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe

O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start

O4 - HKCU\..\Run: [H/PC Connection Agent] "D:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"

O4 - HKCU\..\Run: [internat.exe] internat.exe

O4 - HKCU\..\Run: [DesktopSprite] D:\Program Files\SnowFox\DesktopSprite2\DesktopSprite.exe

O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe

O4 - Global Startup: McAfee Desktop Firewall Tray.lnk = C:\PROGRA~1\NETWOR~1\MCAFEE~1\FireTray.exe

O4 - Global Startup: Monitor Apache Servers.lnk = C:\Inetpub\Apache Group\Apache2\bin\ApacheMonitor.exe

O8 - Extra context menu item: &Add animation to IncrediMail Style Box - D:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm

O8 - Extra context menu item: Google 搜索(&G) - res://c:\program files\google\GoogleToolbar3.dll/cmsearch.html

O8 - Extra context menu item: 使用网际快车下载 - D:\Program Files\FlashGet\jc_link.htm

O8 - Extra context menu item: 使用网际快车下载全部链接 - D:\Program Files\FlashGet\jc_all.htm

O8 - Extra context menu item: 反向链接 - res://c:\program files\google\GoogleToolbar3.dll/cmbacklinks.html

O8 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000

O8 - Extra context menu item: 类似网页 - res://c:\program files\google\GoogleToolbar3.dll/cmsimilar.html

O8 - Extra context menu item: 缓存的网页快照 - res://c:\program files\google\GoogleToolbar3.dll/cmcache.html

O8 - Extra context menu item: 翻译英文字词(&T) - res://c:\program files\google\GoogleToolbar3.dll/cmwordtrans.html

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll

O9 - Extra 'Tools' menuitem: Sun Java 控制台 - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll

O9 - Extra button: 创建移动收藏 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - D:\Program Files\Microsoft ActiveSync\inetrepl.dll

O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - D:\Program Files\Microsoft ActiveSync\inetrepl.dll

O9 - Extra 'Tools' menuitem: 创建移动收藏... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - D:\Program Files\Microsoft ActiveSync\inetrepl.dll

O9 - Extra button: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm

O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm

O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe

O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe

O16 - DPF: {1D040E9A-CBF1-4382-BF37-A5F2613B6BB4} (Net263GetCookieValue Class) - http://auto.topcool.net/263GetCookieValue.cab

O23 - Service: Apache2 - Unknown owner - C:\Inetpub\Apache Group\Apache2\bin\Apache.exe" -k runservice (file missing)

O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINNT\system32\Ati2evxx.exe

O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe

O23 - Service: FinePrint Dispatcher v5 - Unknown owner - C:\WINNT\system32\spool\DRIVERS\W32X86\3\fpdisp5a.exe" /service (file missing)

O23 - Service: McAfee Desktop Firewall Service (FireSvc) - Networks Associates Technology, Inc. - C:\PROGRA~1\NETWOR~1\MCAFEE~1\FireSvc.exe

O23 - Service: IBM PM Service (IBMPMSVC) - Unknown owner - C:\WINNT\system32\ibmpmsvc.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe

O23 - Service: McAfee Framework Service (McAfeeFramework) - Unknown owner - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe" /ServiceStart (file missing)

O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe

O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe

O23 - Service: MySQL4 - Unknown owner - C:\Inetpub\MySQL\bin\mysqld-nt".exe (file missing)

O23 - Service: TopNET-S Launcher (TopNetSLaunch) - Unknown owner - D:\Program Files\Topcon\TopNET\TopNET-S\TopSL.exe (file missing)

[rridgely]

Go to this site and download the antimalware package.

http://www.lunarsoft.net/index.php?ind=dow...ry_view&iden=11

 

Then go here and follow the instruction on how to use each program:

http://www.lunarsoft.net/pc_maintenance.php

 

Also Run this online scanner.(do the complete scan)

http://housecall60.trendmicro.com/en/start_corp.asp?id=scan

 

 

When finished reboot and post a new log.

[gogole]

thank you.

but i don't have a belief to some Anti-Malwares.

still i shall do the online scan.

[rridgely]

What do you mean? Do you not like the programs or do you not think your infected?

I can show you the entries if you dont think your infected.

[gogole]

What do you mean? Do you not like the programs or do you not think your infected?

I can show you the entries if you dont think your infected.

<{POST_SNAPBACK}>

 

really? so why not point it out directly?

 

thank you.

[Tarun]

You more than likely have something in your clipboard, then run CCleaner. When you go to paste later it's gone. That's because CCleaner cleans the clipboard.

 

Does this sound like what's happening to you?