• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 798
  • Last Modified:

Active X component can't create object - Scode: 800A01AD

I am working on a Sony VAIO model number PCG - R5050GL  The OS is Windows XP service pack two.  The combination above presents me with the following error message every time the computer is started:

Active X component can't create object
SRC: Microsoft VBScript runtime error
Line 6  Error:0 Scode: 800A01AD

At the top of the box where this information is being displayed, it appears to give the name of the application that is generating the error message that being Smartissue. The application appears to be made by Sony(?). The only thing I can find is that it may be related to is SupportSoft.

Any suggestions are welcomed!
Thanks!
0
Elton Brown
Asked:
Elton Brown
  • 7
  • 6
1 Solution
 
orangutangCommented:
Is your computer working okay besides the error? Send us your HijackThis (http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php) log.
0
 
Guy Hengel [angelIII / a3]Billing EngineerCommented:
please check out all the applications/services that are started automatically when the computer is starting resp when the user is logging in.
0
 
Elton BrownAuthor Commented:
orangutang,

Yesterday I ran AVAST's BART software which cleaned off 209 nasties! Very nice software! I was using the trial version.

Attached is the output generated by HiJackThis.
hijackthis.log
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

 
orangutangCommented:
Your computer still seems infected. Also, try Malwarebytes' Anti-Malware (http://www.malwarebytes.org/mbam.php) and send us an updated HijackThis log.
0
 
Elton BrownAuthor Commented:
angelIII - It appears that it does not matter who is logging in they still get the same error message.
0
 
Elton BrownAuthor Commented:
orangutang - I was surprised to see how many nasties were still on that computer after AVAST BART! Look at the output from Malwarebytes' Anti-Malware. I take it that this scanner also picks up more than just malware.

Attached is the output from HiJackThis
hijackthis.log
mbam-log-2008-10-07--06-44-24-.txt
0
 
Elton BrownAuthor Commented:
I am currently running Kaspersky's online scanner. Upload the results when scanning completes.
0
 
orangutangCommented:
Hmm, you still seem to be infected. Is that the HijackThis log after you scanned with Malwarebytes' Anti-Malware or before? If it's before, send an updated HijackThis log and use thr latest version of HijackThis (http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php) not 1.99.1
0
 
Elton BrownAuthor Commented:
Here is the lastest version generated by HiJackThis.
hijackthis.log
0
 
orangutangCommented:
Wow, it looks like you got a pretty nasty infection. Create a system restore point and remove these from your HijackThis log in safe mode to clean up:
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)
O2 - BHO: (no name) - {1D64A215-EB1C-46DB-81C7-85522BC364D8} - C:\WINDOWS\system32\mscd.dll (file missing)
O2 - BHO: (no name) - {2C043049-77FD-4521-803D-EEDB1020D6FF} - C:\WINDOWS\system32\snnpapi.dll (file missing)
O3 - Toolbar: FreshBar - {06ABAA2D-34AB-4902-A326-409BD9B9A7A5} - C:\WINDOWS\system32\iecust.dll (file missing)
O3 - Toolbar: SpamBlockerUtility - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Program Files\SpamBlockerUtility\Bin\4.8.4.0\SbHostIE.dll (file missing)
O4 - HKLM\..\Run: [AQ3HelperStartUp] C:\PROGRA~1\AQUATI~1\AQ3HEL~1.EXE /partner AQ3
O4 - HKLM\..\Run: [taskopen.exe] taskopen.exe
O4 - HKLM\..\Run: [StartCpl] newbreed.exe
O4 - HKLM\..\Run: [newbreed] srbho.exe
O4 - HKLM\..\Run: [SpamBlocker] C:\Program Files\SpamBlockerUtility\Bin\4.8.4.0\SbOEAddOn.exe
O4 - HKLM\..\Run: [Spam Blocker for Outlook Express] C:\PROGRA~1\SPAMBL~1\Bin\484~1.0\SBInst.exe
O4 - HKLM\..\Run: [zoaoojbm] C:\WINDOWS\system32\tcnwjubl.exe
O4 - HKLM\..\Run: [SpySpotter System Defender] C:\Program Files\SpySpotter3\Defender.exe -startup
O4 - HKLM\..\Run: [WeatherOnTray] C:\Program Files\SpamBlockerUtility\Bin\4.8.4.0\SbWeatherOnTray.exe
O4 - HKCU\..\Run: [WinFixer2006] "C:\Program Files\WinFixer_2006\uwfx6.exe" /min
O4 - Global Startup: MyWebSearch Email Plugin.lnk = C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
O4 - Global Startup: PrecisionTime.lnk = C:\Program Files\PrecisionTime\PrecisionTime.exe
O18 - Filter hijack: text/html - {A2073562-07D8-4302-A13F-B5F127FCFA68} - C:\WINDOWS\system32\snnpapi.dll
O18 - Filter: text/plain - {A2073562-07D8-4302-A13F-B5F127FCFA68} - C:\WINDOWS\system32\snnpapi.dll
O20 - Winlogon Notify: mlJAqqRk - mlJAqqRk.dll (file missing)
O23 - Service: SpywareCleanerService - Unknown owner - C:\Program Files\Spyware Cleaner\SCService.exe (file missing)

Also, if you're still having the problem, remove this from your HijackThis log:
O4 - HKLM\..\Run: [ZTgServerSwitch] c:\program files\support.com\client\lserver\server.vbs
Also, send another updated HijackThis log.
0
 
orangutangCommented:
I've requested attention for help from spyware experts. In the meantime, you can also scan with SUPERAntiSpyware (http://www.superantispyware.com/downloadfile.html?productid=SUPERANTISPYWAREFREE). Also, try removing this:
O4 - HKLM\..\Run: [CleanupProgram] C:\Sonysys\cleanup.exe
Also, try checking Add/Remove Programs for anything related to Support.com and uninstall it before trying to remove:
O4 - HKLM\..\Run: [ZTgServerSwitch] c:\program files\support.com\client\lserver\server.vbs
0
 
Elton BrownAuthor Commented:
orangutang -

I've just completed running SuperAnitiSpyware. It picked up a LOAD of Trojans and spyware - 41 files detected 8269. You have to remember that this laptop NEVER had any anti anything installed on it. The computer is about 7(?) years old. GOOD GRIEF!
Attached is the latest output from HiJackThis. I also preformed the HiJackThis cleanup you requested.

Thanks orangutang for your continued support!
hijackthis-safemode-after.txt
0
 
Elton BrownAuthor Commented:
Thanks folks for all of your help! The client wanted his computer today, now. He was having computer withdrawals!
After that last scanning when I started up the computer, I didn't see any error messages during boot time.
For some reason I could not switch from one user to another - had to re-boot.  I found that strange, the client didn't care about that.

Cheers!
0
 
orangutangCommented:
Well, the latest HijackThis log shows:
O4 - HKCU\..\Run: [WinFixer2006] "C:\Program Files\WinFixer_2006\uwfx6.exe" /min
which is still a sign that it's infected. I would remove that line
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Protect Your Employees from Wi-Fi Threats

As Wi-Fi growth and popularity continues to climb, not everyone understands the risks that come with connecting to public Wi-Fi or even offering Wi-Fi to employees, visitors and guests. Download the resource kit to make sure your safe wherever business takes you!

  • 7
  • 6
Tackle projects and never again get stuck behind a technical roadblock.
Join Now