Sony Online Entertainment, how do I make it go away?

Discussion in 'Computers' started by Joey Skinner, Dec 26, 2005.

  1. Joey Skinner

    Joey Skinner Second Unit

    Joined:
    Sep 12, 2003
    Messages:
    339
    Likes Received:
    0
    Trophy Points:
    0
    My son has a new laptop and he installed the game "Star Wars Galaxy" on it. The laptop is not really capable of running it like it should so we deleted it. My problem is this Sony Online Entertainment box keeps popping to log in for Station Launchpad. I can't close it. I've removed the program, deleted the registry entry, stopped the process, and removed all files but it keeps coming back like Michael Myers! This thing has popped up 10 times while typing this message. How do I stop it?
     
  2. Scott Merryfield

    Scott Merryfield Executive Producer

    Joined:
    Dec 16, 1998
    Messages:
    12,735
    Likes Received:
    1,337
    Trophy Points:
    9,110
    Location:
    Michigan
    You can run HiJack This, which can be downloaded here. Look for an entry that looks like it's from this Sony program and delete it.

    Warning: be careful that you do not delete something important. If you are unsure about what to delete, post the log from HiJack This here and someone can probably help.
     
  3. Joey Skinner

    Joey Skinner Second Unit

    Joined:
    Sep 12, 2003
    Messages:
    339
    Likes Received:
    0
    Trophy Points:
    0
    Here is the logfile:
    Logfile of HijackThis v1.99.1
    Scan saved at 5:35:53 PM, on 12/26/2005
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:WINDOWSSystem32smss.exe
    C:WINDOWSsystem32winlogon.exe
    C:WINDOWSsystem32services.exe
    C:WINDOWSsystem32lsass.exe
    C:WINDOWSsystem32svchost.exe
    C:WINDOWSSystem32svchost.exe
    C:WINDOWSsystem32spoolsv.exe
    C:AcereManageranbmServ.exe
    C:WINDOWSExplorer.EXE
    C:WINDOWSSOUNDMAN.EXE
    C:WINDOWSAGRSMMSG.exe
    C:WINDOWSsystem32Rundll32.exe
    C:PROGRA~1mcafee.comagentmcagent.exe
    C:PROGRA~1McAfee.comPERSON~1MpfTray.exe
    C:PROGRA~1McAfeeSPAMKI~1MskAgent.exe
    C:WINDOWSsystem32keyhook.exe
    C:Program FilesArcadePCMService.exe
    C:Program FilesMicrosoft AntiSpywaregcasServ.exe
    C:WINDOWSsystem32sistray.exe
    c:PROGRA~1mcafee.comvsomcshield.exe
    c:PROGRA~1mcafee.comagentmctskshd.exe
    c:PROGRA~1mcafee.comvsoOasClnt.exe
    C:PROGRA~1McAfee.comPERSON~1MpfService.exe
    C:PROGRA~1McAfee.comPERSON~1MpfAgent.exe
    C:WINDOWSsystem32wuauclt.exe
    C:Program FilesInternet ExplorerIEXPLORE.EXE
    C:DOCUME~1GRANTS~1LOCALS~1TempTemporary Directory 1 for hijackthis[1].zipHijackThis.exe
    c:program

    R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://global.acer.com
    R1 - HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = http://global.acer.com/
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll
    O2 - BHO: McBrwHelper Class - {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} - c:program filesmcafee.commpsmcbrhlpr.dll
    O2 - BHO: McAfee PopupKiller - {3EC8255F-E043-4cae-8B3B-B191550C2A22} - c:program filesmcafee.commpspopupkiller.dll
    O2 - BHO: McAfee Anti-Phishing Filter - {41D68ED8-4CFF-4115-88A6-6EBB8AF19000} - c:program filesmcafeespamkillermcapfbho.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:PROGRA~1SPYBOT~1SDHelper.dll
    O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:progra~1mcafee.comvsomcvsshl.dll
    O4 - HKLM..Run: [SynTPLpr] C:Program FilesSynapticsSynTPSynTPLpr.exe
    O4 - HKLM..Run: [SynTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exe
    O4 - HKLM..Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM..Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM..Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
    O4 - HKLM..Run: [IMJPMIG8.1] "C:WINDOWSIMEimjp8_1IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
    O4 - HKLM..Run: [MSPY2002] C:WINDOWSsystem32IMEPINTLGNTImScInst.exe /SYNC
    O4 - HKLM..Run: [PHIME2002ASync] C:WINDOWSsystem32IMETINTLGNTTINTSETP.EXE /SYNC
    O4 - HKLM..Run: [PHIME2002A] C:WINDOWSsystem32IMETINTLGNTTINTSETP.EXE /IMEName
    O4 - HKLM..Run: [eRecoveryService] C:WindowsSystem32Check.exe
    O4 - HKLM..Run: [VSOCheckTask] "C:PROGRA~1McAfee.comVSOmcmnhdlr.exe" /checktask
    O4 - HKLM..Run: [VirusScan Online] C:Program FilesMcAfee.comVSOmcvsshld.exe
    O4 - HKLM..Run: [OASClnt] C:Program FilesMcAfee.comVSOoasclnt.exe
    O4 - HKLM..Run: [MCAgentExe] c:PROGRA~1mcafee.comagentmcagent.exe
    O4 - HKLM..Run: [MCUpdateExe] C:PROGRA~1mcafee.comagentMcUpdate.exe
    O4 - HKLM..Run: [MPFExe] C:PROGRA~1McAfee.comPERSON~1MpfTray.exe
    O4 - HKLM..Run: [MPSExe] c:PROGRA~1mcafee.commpsmscifapp.exe /embedding
    O4 - HKLM..Run: [MSKAGENTEXE] C:PROGRA~1McAfeeSPAMKI~1MskAgent.exe
    O4 - HKLM..Run: [MSKDetectorExe] C:PROGRA~1McAfeeSPAMKI~1MSKDetct.exe /startup
    O4 - HKLM..Run: [SiS Windows KeyHook] C:WINDOWSsystem32keyhook.exe
    O4 - HKLM..Run: [PCMService] "C:Program FilesArcadePCMService.exe"
    O4 - HKLM..Run: [gcasServ] "C:Program FilesMicrosoft AntiSpywaregcasServ.exe"
    O4 - HKLM..Run: [MSConfig] C:WINDOWSPCHealthHelpCtrBinariesMSConfig.exe /auto
    O4 - Global Startup: Utility Tray.lnk = C:WINDOWSsystem32sistray.exe
    O9 - Extra button: (no name) - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - c:program filesmcafeespamkillermcapfbho.dll
    O9 - Extra 'Tools' menuitem: McAfee Anti-Phishing Filter - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - c:program filesmcafeespamkillermcapfbho.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:AcereManageranbmServ.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
    O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:program filesmcafee.comagentmcdetect.exe
    O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:PROGRA~1mcafee.comvsomcshield.exe
    O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:PROGRA~1mcafee.comagentmctskshd.exe
    O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:PROGRA~1McAfee.comAgentmcupdmgr.exe
    O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:PROGRA~1McAfee.comPERSON~1MpfService.exe
    O23 - Service: McAfee SpamKiller Server (MskService) - McAfee Inc. - C:PROGRA~1McAfeeSPAMKI~1MSKSrvr.exe
     
  4. Joey Skinner

    Joey Skinner Second Unit

    Joined:
    Sep 12, 2003
    Messages:
    339
    Likes Received:
    0
    Trophy Points:
    0
    There is a process that is just called "program", and when I end it the popup goes away for a few moments but then the popup and the process both come back.
     
  5. Scott Merryfield

    Scott Merryfield Executive Producer

    Joined:
    Dec 16, 1998
    Messages:
    12,735
    Likes Received:
    1,337
    Trophy Points:
    9,110
    Location:
    Michigan
    The only thing that looks suspicious is sistray.exe. I found this when I did a Google search on sistray.exe.
     
  6. rob-h

    rob-h Second Unit

    Joined:
    Jul 6, 2005
    Messages:
    263
    Likes Received:
    0
    Trophy Points:
    0
    SIStray is nor suspicious. Have you chaeck the hklmsoftwaremicrosoftwindowscurrentversionrun and hklmsoftwaremicrosoftwindowscurrentversionrun once to verify it was not launching somethign on startup? I assume you checked the startup folder for your profile as well as all users? Those are the only places it could be besides a service.
     
  7. Joey Skinner

    Joey Skinner Second Unit

    Joined:
    Sep 12, 2003
    Messages:
    339
    Likes Received:
    0
    Trophy Points:
    0
    I did a system restore and whatever it was it is gone now. Thanks to all who responded.
     

Share This Page