Run-time error 53

hello; i seem to have the same problem as KY.rose

everytime i start up my computer i get that message

what have i already done?
- ad-aware and spysweeper fully updated scan
- norton antivirus scan
- tried to find and delete all filez of that day that time

still i have that message

finding the folder c:\windows\wt.... has failed, i do not find this
(even with search)

this is whats running on my pc according to HijackThis

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\rundll32.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb0 7.exe
C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5 a.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis2 a.exe
C:\WINDOWS\System32\ASYSMGR.EXE
C:\WINDOWS\System32\NotifyPhoneBook.exe
C:\Program Files\Netropa\Multimedia Keyboard\TrayMon.exe
C:\Program Files\Netropa\Onscreen Display\OSD.exe
C:\Program Files\Mozilla Firefox\firefox.exe
D:\Winamp\winamp.exe
D:\Downs\HijackThis.exe

i allready tried to remove smss.exe and crypserv.exe, no luck
and why is svchost.exe running twice.

unfortunatly i can't get in my regedit @ this moment. some bug prevent me from doing it, i tried also everything (yahaa worm remover, regedt32, regedit.exe, regedit.com)

also if i type msconfig i can't get there (in what menu can i find it?)



i find this very strange

Welcome to Windrivers Paffke.

In future please start your own thread, while you may think you have the same problem, you don't

As you are aware you have crypserv - but it is not apparently a nasty, but something business uses Is this a company machine?

SVCHOST is what is known as a generic process. it is a hold all for other processes.

smss.exe is also legit

You did not post the rest of the log... this is where things are likely to hide.

Also pay http://housecall.antivirus.com a visit and do an online scan. I know you have norton, but norton is the first thing to get damaged in an attack.

Quote:

---

finding the folder c:\windows\wt.... has failed, i do not find this

---

Well thats because it has been deleted, therefore cannot be found.

Something is calling it, it may be a start up, it may be something that happens at a set point, like launching explorer. Since you didn't post the full message, it can only be guesswork.

Start a new thread, post the ENTIRE hijackthis log, but AFTER you have done the online virus scan please.

Quote:

---

Originally Posted by NooNoo

you need to go through and clean off the spyware. post your highjack this log rose when you have done the other suggestions first.

---

Hi am getting an annoying message, does anyone know the fix for this, I take it this is a Trojan.

"run-time error 53 file not found sex"