I am running Win XP with SP2 installed. Computer has been stable for many
months. About a week ago a problem started. No devices are listed in device
mgr and operations in window explorer have slowed to a crawl re file access.
I have looked at some of the Microsoft support bulletins and have checked to
see that plug and play is enabled in services.msc and msconfig – otherwise I
am out of ideasEverything else seems to work normally. Does anyone have
suggestions outside of reloading the system? PS – I have even tried system
restore.

DAve

May be the result of Malware or Privileges reset on the Enum
Registry keys that hold Device Manager tables -
A fix for the Malware is available here:
http://swandog46.geekstogo.com/aproposfix.exe

"davaz" <davaz@discussions.microsoft.com> wrote in message
news:62047082-19CA-4BDA-B0CF-ECFAAE2D61EB@microsoft.com...
>I am running Win XP with SP2 installed. Computer has been stable for many
> months. About a week ago a problem started. No devices are listed in
> device
> mgr and operations in window explorer have slowed to a crawl re file
> access.
> I have looked at some of the Microsoft support bulletins and have checked
> to
> see that plug and play is enabled in services.msc and msconfig - otherwise
> I
> am out of ideasEverything else seems to work normally. Does anyone have
> suggestions outside of reloading the system? PS - I have even tried
> system
> restore.
>
> DAve

davaz wrote:

> I am running Win XP with SP2 installed. Computer has been stable for
> many months. About a week ago a problem started. No devices are listed
> in device mgr and operations in window explorer have slowed to a crawl
> re file access. I have looked at some of the Microsoft support
> bulletins and have checked to see that plug and play is enabled in
> services.msc and msconfig – otherwise I am out of ideasEverything else
> seems to work normally. Does anyone have
> suggestions outside of reloading the system? PS – I have even tried
> system restore.
>
> DAve

There has been a rash of the "empty Device Manager" problem lately,
caused by malware. Your other symptoms indicate probable malware
infection, too.

The AproposFix mentioned in this forum thread took care of the empty
Device Manager for other posters:
http://www.dslreports.com/forum/remark,14679793

It would be smart to scan for other malware also:
http://www.elephantboycomputers.com/...moving_Malware

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

"Malke" wrote:

>
> There has been a rash of the "empty Device Manager" problem lately,
> caused by malware. Your other symptoms indicate probable malware
> infection, too.
>
> The AproposFix mentioned in this forum thread took care of the empty
> Device Manager for other posters:
> http://www.dslreports.com/forum/remark,14679793
>
> It would be smart to scan for other malware also:
> http://www.elephantboycomputers.com/...moving_Malware
>
> Malke
> --
Malke and McCarty -- I tried it and guess what -- it worked!!

Log file is shown below:

Log of AproposFix v1

************

Running from directory:
C:\Documents and Settings\David Allan\Desktop\aproposfix

************

Registry entries found:

[HKEY_LOCAL_MACHINE\Software\C0XjsAvEcUs5]
@="\\LE7GCHUVVUVVWVOM5MNO5UVVUkXV0qvlw0 VMSMN8GbaV7LCP8LMVF668LG77WMSM"
"Device"="\\\\.\\usbstub"
"DriverPath"="C:\\WINDOWS\\system32\\drivers\\lcce rmdd.sys"
"DriverName"="Trkdmin"
"HideUninstallerName"="C:\\Program Files\\Powetdrv\\recplace.exe"
"UninstallerPath"="C:\\WINDOWS\\system32\\getrddlg .exe"
"UninstallerRegKey"="HKEY_LOCAL_MACHINE\\SOFTWARE\ \Microsoft\\Windows\\CurrentVersion\\Uninstall\\{D 364EC25-E2AD-4A3F-98B5-7F71D273690E}"
"UninstallerParams"="/CTUN"
"HDll"="C:\\WINDOWS\\system32\\rasestrt.dll"
"ServerAddress"="adchannel.contextplus.net"
"LegalNote"="http://adchannel.contextplus.net/legal-note/nonbranded.html"
"PartnerId"="CP.IST2"
"InstallationId"="{Xd051b36-d9a3-1b77-0802-3a6a6e697a56}"
"PageFiltering"=dword:00000001
"CrMnTmt"=dword:0036ee80

************

Removing hidden service:
Service Trkdmin removed.

Removing hidden folder:
Deletion of folder Powetdrv succeeded!

Deleting files:

Deletion of file C:\WINDOWS\system32\drivers\lccermdd.sys succeeded!
Deletion of file C:\WINDOWS\system32\dwuskres.exe succeeded!
Deletion of file C:\WINDOWS\system32\rasestrt.dll succeeded!
Deletion of file C:\WINDOWS\system32\getrddlg.exe succeeded!

Backing up files:
Done!

Removing registry entries:

REGEDIT4

[-HKEY_CURRENT_USER\Software\C0XjsAvEcUs5]
[-HKEY_LOCAL_MACHINE\Software\C0XjsAvEcUs5]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\{D364EC25-E2AD-4A3F-98B5-7F71D273690E}]

Done!

Finished!

davaz wrote:

>
>
> "Malke" wrote:
>
>>
>> There has been a rash of the "empty Device Manager" problem lately,
>> caused by malware. Your other symptoms indicate probable malware
>> infection, too.
>>
>> The AproposFix mentioned in this forum thread took care of the empty
>> Device Manager for other posters:
>> http://www.dslreports.com/forum/remark,14679793
>>
>> It would be smart to scan for other malware also:
>> http://www.elephantboycomputers.com/...moving_Malware
>>
>> Malke
>> --
> Malke and McCarty -- I tried it and guess what -- it worked!!
>
> Log file is shown below:
>
> Log of AproposFix v1
>
> ************
>
> Running from directory:
> C:\Documents and Settings\David Allan\Desktop\aproposfix
>
> ************
>
> Registry entries found:
>
> [HKEY_LOCAL_MACHINE\Software\C0XjsAvEcUs5]
> @="\\LE7GCHUVVUVVWVOM5MNO5UVVUkXV0qvlw0
> VMSMN8GbaV7LCP8LMVF668LG77WMSM" "Device"="\\\\.\\usbstub"
> "DriverPath"="C:\\WINDOWS\\system32\\drivers\\lcce rmdd.sys"
> "DriverName"="Trkdmin"
> "HideUninstallerName"="C:\\Program Files\\Powetdrv\\recplace.exe"
> "UninstallerPath"="C:\\WINDOWS\\system32\\getrddlg .exe"
>
"UninstallerRegKey"="HKEY_LOCAL_MACHINE\\SOFTWARE\ \Microsoft\\Windows\\CurrentVersion\\Uninstall\\{D 364EC25-E2AD-4A3F-98B5-7F71D273690E}"
> "UninstallerParams"="/CTUN"
> "HDll"="C:\\WINDOWS\\system32\\rasestrt.dll"
> "ServerAddress"="adchannel.contextplus.net"
>
"LegalNote"="http://adchannel.contextplus.net/legal-note/nonbranded.html"
> "PartnerId"="CP.IST2"
> "InstallationId"="{Xd051b36-d9a3-1b77-0802-3a6a6e697a56}"
> "PageFiltering"=dword:00000001
> "CrMnTmt"=dword:0036ee80
>
> ************
>
> Removing hidden service:
> Service Trkdmin removed.
>
> Removing hidden folder:
> Deletion of folder Powetdrv succeeded!
>
> Deleting files:
>
> Deletion of file C:\WINDOWS\system32\drivers\lccermdd.sys succeeded!
> Deletion of file C:\WINDOWS\system32\dwuskres.exe succeeded!
> Deletion of file C:\WINDOWS\system32\rasestrt.dll succeeded!
> Deletion of file C:\WINDOWS\system32\getrddlg.exe succeeded!
>
> Backing up files:
> Done!
>
> Removing registry entries:
>
> REGEDIT4
>
> [-HKEY_CURRENT_USER\Software\C0XjsAvEcUs5]
> [-HKEY_LOCAL_MACHINE\Software\C0XjsAvEcUs5]
>
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\{D364EC25-E2AD-4A3F-98B5-7F71D273690E}]
>
> Done!
>
> Finished!

Thanks for posting this - very helpful. Glad you got it sorted.

Stay safe, now!

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User