|
|
|
|
|||||
|
|
|
|
|
|
|||
| Welcome
to Tech Support Forum home to more then 136,000 problems solved. Issues
have included: Spyware, Malware, Virus Issues, Windows, Microsoft,
Linux, Networking, Security, Hardware, and Gaming Getting your
problem solved is as easy as: 1. Registering for a free account 2. Asking your question 3. Receiving an answer Registered members: * See fewer ads. * And much more..
|
| Want to know how to post a question? click here | Having problems with spyware and pop-ups? First Steps |
|
|||||||
| Resolved HJT Threads Resolved spyware and popup issues. |
|
|
LinkBack | Thread Tools |
07-29-2006, 07:50 AM
|
#1 (permalink) |
|
Registered User
Join Date: Apr 2006
Location: Missouri
Posts: 386
OS: Windows XP Professional Service Pack 3
   |
My mom's computer's CPU Usage keeps going to 100% and going back down to 10%.
Description of problem, Hijackthis log is at the bottom, sorry it is so long I didn't want to miss a important detail. Games have become glitchy and the computer also sometimes does not download things completely. Also I watch DVDs and it is slow and glitchy possibly because the computer is using a lot of CPU usage even though nothing is on except the process manager I have from tune up utilities. It keeps saying 100% and going back down to like 10%. One thing I think is funny is that it keeps identifying one of my net-zero processes as a Trojan horse. It does that with my computer too. For some reason Netzero runs two process's called EXEC.EXE and one says Netzero and the other says Trojan Horse ZCast. If you want a screenshot of my process manager saying this you would have to show me where to get a small screenshot program. Also sometimes if I am on the computer playing games for a while and I try to connect to the Internet Netzero tells me Could not contact the network try again later. So I restart and then it works just fine. Here is the hijackthis log I looked at it and didn't really see anything wrong with it. Except for the fact that real player is on here and I believe somewhere in a thread I seen someone telling them to get rid of it.
Logfile of HijackThis v1.99.1 Scan saved at 8:30:52 AM, on 7/29/2006 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE C:\WINDOWS\SYSTEM\STIMON.EXE C:\WINDOWS\EXPLORER.EXE C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\WINDOWS\WT\WCMDMGR.EXE C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE C:\WINDOWS\SYSTEM\USBMMKBD.EXE C:\WINDOWS\SYSTEM\HIDSERV.EXE C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE C:\PROGRAM FILES\MICROSOFT ENCARTA\ENCARTA WORLD ENGLISH DICTIONARY 2001\QSHLFED.EXE C:\WINDOWS\SYSTEM\WMIEXE.EXE C:\WINDOWS\SYSTEM\DDHELP.EXE C:\PROGRAM FILES\NETZERO\EXEC.EXE C:\WINDOWS\SYSTEM\RNAAPP.EXE C:\WINDOWS\SYSTEM\TAPISRV.EXE C:\PROGRAM FILES\NETZERO\EXEC.EXE C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE C:\PROGRAM FILES\LAVASOFT\AD-AWARE SE PLUS\AD-AWARE.EXE C:\PROGRAM FILES\HIJACKTHIS\HIJACKTHIS.EXE R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.hpwis.com/ O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [Zone Labs Client] "C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE" O4 - HKLM\..\Run: [wcmdmgr] C:\WINDOWS\wt\wcmdmgrl.exe -launch O4 - HKLM\..\Run: [SystemTray] SysTray.Exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [USBMMKBD] usbmmkbd.exe O4 - HKLM\..\Run: [Hidserv] Hidserv.exe run O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service O4 - HKLM\..\RunServices: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE O4 - Startup: Quick Shelf.lnk = C:\Program Files\Microsoft Encarta\Encarta World English Dictionary 2001\QSHLFED.EXE O8 - Extra context menu item: &Google Search - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmsearch.html O8 - Extra context menu item: &Translate English Word - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmwordtrans.html O8 - Extra context menu item: Cached Snapshot of Page - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmcache.html O8 - Extra context menu item: Similar Pages - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmsimilar.html O8 - Extra context menu item: Backward Links - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmbacklinks.html O8 - Extra context menu item: Translate Page into English - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmtrans.html O8 - Extra context menu item: &Define - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM O8 - Extra context menu item: Look Up in &Encyclopedia - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE O9 - Extra 'Tools' menuitem: MSN Messenger Service - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRAM FILES\JAVA\JRE1.5.0_06\BIN\SSV.DLL O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRAM FILES\JAVA\JRE1.5.0_06\BIN\SSV.DLL O9 - Extra button: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM O9 - Extra 'Tools' menuitem: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM O9 - Extra button: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM O9 - Extra 'Tools' menuitem: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM O9 - Extra button: Researcher - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\EROProj.dll |
|
     |
| Important Information |
|
Join the #1 Tech Support Forum Today - It's Totally Free!
TechSupportForum.com is a leading support website for your computer needs. We offer free, friendly and personalized computer support. Why pay to have your computer fixed when you can do it for free. Join TechSupportforum.com Today - Click Here |
|
08-01-2006, 01:14 AM
|
#2 (permalink) |
|
Analyst, Security Team
Join Date: Jun 2005
Posts: 3,065
OS: Windows XP
|
Online Scans
Perform an online scan with Internet Explorer with Panda ActiveScan ** click on "Free use ActiveScan" located on the top right hand corner
In your next post please include:
__________________
|
|
|
|
|
08-02-2006, 10:05 PM
|
#3 (permalink) |
|
Registered User
Join Date: Apr 2006
Location: Missouri
Posts: 386
OS: Windows XP Professional Service Pack 3
|
Panda ActiveScan Report
Really must be a bad problem I guess. I hate winfixer and I don't know how it got there either. I have seen forums on how to fix it quite a process too. It seems interesting that it picked up a file on my mom's game as adware:Adware:Adware/NewAds Not disinfected C:\Program Files\Treasure Fall\Read Me.exe
Adware:Adware/NewAds Not disinfected C:\Program Files\Mah Jong Quest\debug.exe I hope you like the way I got the report quoted I thought it would be easier for you. I will try to do this from now on. But the monitor I was talking to you about in the other thread I am quite sure it is broken. Don't know what exactly is wrong with it I will contact HP about it they will give me some options on how to get it fixed. Incident Status Location Potentially unwanted tool:application/winfixer2005 Not disinfected c:\windows\downloaded program files\UWFX5_0001_N57M2811NetInstaller.exe Dialer:dialer.xd Not disinfected c:\windows\switchagreement.txt Adware:adware/dollarrevenue Not disinfected c:\windows\KEYBOARD171.dat Adware:adware/maxifiles Not disinfected c:\program files\common files\InetGet Adware:adware/windowenhancer Not disinfected c:\windows\system\SBUtils Adware:Adware/WindowEnhancer Not disinfected C:\WINDOWS\SYSTEM\SBUtils\SBWebCtl.dll Virus:Trj/Goldun.HV Disinfected C:\WINDOWS\SYSTEM\dvd4free.dll Virus:Trj/Agent.AGR Disinfected C:\WINDOWS\SYSTEM\pgntpyb.dll Virus:Trj/ConHook.P Disinfected C:\WINDOWS\SYSTEM\nnnmlkh.dll Spyware:Cookie/myaffiliateprogram Not disinfected C:\WINDOWS\Cookies\hp authorized customer@www.myaffiliateprogram[1].txt Spyware:Cookie/BurstBeacon Not disinfected C:\WINDOWS\Cookies\hp authorized customer@www.burstbeacon[2].txt Spyware:Cookie/Belnk Not disinfected C:\WINDOWS\Cookies\hp authorized customer@belnk[1].txt Spyware:Cookie/YieldManager Not disinfected C:\WINDOWS\Cookies\hp authorized customer@ad.yieldmanager[1].txt Spyware:Cookie/Belnk Not disinfected C:\WINDOWS\Cookies\hp authorized customer@belnk[2].txt Spyware:Cookie/Tribalfusion Not disinfected C:\WINDOWS\Cookies\hp authorized customer@tribalfusion[1].txt Spyware:Cookie/Mediaplex Not disinfected C:\WINDOWS\Cookies\hp authorized customer@mediaplex[1].txt Spyware:Cookie/Apmebf Not disinfected C:\WINDOWS\Cookies\hp authorized customer@apmebf[2].txt Spyware:Cookie/QkSrv Not disinfected C:\WINDOWS\Cookies\hp authorized customer@qksrv[2].txt Spyware:Cookie/adultfriendfinder Not disinfected C:\WINDOWS\Cookies\hp authorized customer@adultfriendfinder[2].txt Spyware:Cookie/YieldManager Not disinfected C:\WINDOWS\Cookies\hp authorized customer@ad.yieldmanager[2].txt Spyware:Cookie/Atlas DMT Not disinfected C:\WINDOWS\Cookies\hp authorized customer@atdmt[2].txt Spyware:Cookie/Doubleclick Not disinfected C:\WINDOWS\Cookies\hp authorized customer@doubleclick[1].txt Spyware:Cookie/Bluestreak Not disinfected C:\WINDOWS\Cookies\hp authorized customer@bluestreak[1].txt Spyware:Cookie/PointRoll Not disinfected C:\WINDOWS\Cookies\hp authorized customer@ads.pointroll[2].txt Spyware:Cookie/RealMedia Not disinfected C:\WINDOWS\Cookies\hp authorized customer@realmedia[1].txt Spyware:Cookie/AdDynamix Not disinfected C:\WINDOWS\Cookies\hp authorized customer@ads.addynamix[1].txt Spyware:Cookie/2o7 Not disinfected C:\WINDOWS\Cookies\hp authorized customer@2o7[2].txt Spyware:Cookie/QuestionMarket Not disinfected C:\WINDOWS\Cookies\hp authorized customer@questionmarket[1].txt Spyware:Cookie/Adserver Not disinfected C:\WINDOWS\Cookies\hp authorized customer@z1.adserver[1].txt Potentially unwanted tool:Application/Winfixer2005 Not disinfected C:\WINDOWS\Downloaded Program Files\CONFLICT.1\UWFX5_0001_N57M2811NetInstaller.exe Potentially unwanted tool:Application/HideWindow.A Not disinfected C:\HP\bin\FondleWindow.exe Potentially unwanted tool:Application/KillApp.B Not disinfected C:\HP\bin\KillIt.exe Hacktool:HackTool/ProcLog.A Not disinfected C:\HP\bin\ProcessLogger.exe Virus:Trj/Reboot.F Disinfected C:\HP\bin\Rebooter.exe Potentially unwanted tool:Application/KillApp.A Not disinfected C:\HP\bin\Terminator.exe Potentially unwanted tool:Application/KillApp.C Not disinfected C:\HP\bin\KillWind.exe Potentially unwanted tool:Application/KillApp.C Not disinfected C:\HP Internet\Surfboard\KillWind.exe Adware:Adware/NewAds Not disinfected C:\Program Files\Windows\WinUpdate.exe[²ŞÇ] Adware:Adware/NewAds Not disinfected C:\Program Files\Treasure Fall\Read Me.exe Adware:Adware/NewAds Not disinfected C:\Program Files\Mah Jong Quest\debug.exe Last edited by Vikesrock8411; 08-03-2006 at 11:56 AM. |
|
|
|
|
08-03-2006, 12:00 PM
|
#4 (permalink) |
|
Analyst, Security Team
Join Date: Jun 2005
Posts: 3,065
OS: Windows XP
|
Please download the Suspicious File Packer. Unzip it your Desktop
Double click on sfp.exe to run it. Paste the following text into the box that pops up.
Then click continue. It will create a file called requested-files[Date and Time].cab Please upload that file here. Download haxfix.exe and save it to your desktop.
A red "dos window" (dos box) will open with options: 1. Make logfile 2. Run auto fix 3. Run manual fix E. Exit Haxfix
__________________
|
|
|
|
|
08-08-2006, 02:37 AM
|
#5 (permalink) |
|
Registered User
Join Date: Apr 2006
Location: Missouri
Posts: 386
OS: Windows XP Professional Service Pack 3
|
Sorry it took me so long to reply the threads I have been subscribing to have been disappearing for some reason. I had to look through the threads I have posted and seen that you have replyed. Anyways, I submitted that file to the website but I can't do anything more because of the fact that the computer must badly be messed up it told me that the haxfix was a Bad command or file name in the Dos window and in a notepad that pops up says Unsupported version. I have seen wierd things in msdos mode. I was trying to update the bios once and it gave me the same problem bad command or file name.
|
|
|
|
|
08-08-2006, 01:54 PM
|
#6 (permalink) |
|
Analyst, Security Team
Join Date: Jun 2005
Posts: 3,065
OS: Windows XP
|
I apologize for the "Unsupported Version" error, that was my fault.
Please download the Killbox by Option^Explicit. Note: In the event you already have Killbox, this is a new version that I need you to download.
If your computer does not restart automatically, please restart it manually. If you receive a message such as: "Component 'MsComCtl.ocx' or one of its dependencies not correctly registered: a file is missing or invalid." when trying to run Killbox, click here to download and run missingfilesetup.exe. Then try Killbox again. Run a new scan with Hijackthis and post the log here, also let me know how the Pc is running.
__________________
|
|
|
|
|
08-08-2006, 02:30 PM
|
#7 (permalink) |
|
Registered User
Join Date: Apr 2006
Location: Missouri
Posts: 386
OS: Windows XP Professional Service Pack 3
|
All were deleted and I did not receive any messages that you mentioned. I had to get the following application you asked for from www.killbox.net the site you gave me did not work. But sorry about the confusion of the OS's I believe that you seen my windows xp on the side. I was asumming that you would of seen the windows me thing in the hijack this log. And here is the new hijackthislog Logfile of HijackThis v1.99.1
Scan saved at 3:31:44 PM, on 8/8/2006 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\STIMON.EXE C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE C:\WINDOWS\SYSTEM\ZONELABS\ISAFE.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE C:\WINDOWS\EXPLORER.EXE C:\WINDOWS\TASKMON.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\WINDOWS\SYSTEM\HPSYSDRV.EXE C:\PROGRAM FILES\HP\HPCORETECH\HPCMPMGR.EXE C:\PROGRAM FILES\HP\HP SOFTWARE UPDATE\HPWUSCHD2.EXE C:\WINDOWS\SYSTEM\USBMMKBD.EXE C:\WINDOWS\SYSTEM\HIDSERV.EXE C:\WINDOWS\RUNDLL32.EXE C:\WINDOWS\PCTVOICE.EXE C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE C:\WINDOWS\SYSTEM\WMIEXE.EXE C:\PROGRAM FILES\NETZERO\EXEC.EXE C:\WINDOWS\SYSTEM\RNAAPP.EXE C:\WINDOWS\SYSTEM\TAPISRV.EXE C:\PROGRAM FILES\NETZERO\EXEC.EXE C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE C:\WINDOWS\SYSTEM\DDHELP.EXE C:\PROGRAM FILES\HIJACKTHIS\HIJACKTHIS.EXE R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.hpwis.com/ O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: (no name) - {4AC8D076-6435-43DB-B43A-0C346FECC8F6} - (no file) O2 - BHO: (no name) - {A792BD61-9CB2-488F-88E5-67BA1CB2C19F} - (no file) O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe O4 - HKLM\..\Run: [SystemTray] SysTray.Exe O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [USBMMKBD] usbmmkbd.exe O4 - HKLM\..\Run: [Hidserv] Hidserv.exe run O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [CountrySelection] pctptt.exe O4 - HKLM\..\Run: [PCTVOICE] pctvoice.exe O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe O4 - HKLM\..\RunServices: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service O4 - HKLM\..\RunServices: [CAISafe] C:\WINDOWS\SYSTEM\ZoneLabs\isafe.exe O8 - Extra context menu item: &Google Search - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmsearch.html O8 - Extra context menu item: &Translate English Word - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmwordtrans.html O8 - Extra context menu item: Cached Snapshot of Page - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmcache.html O8 - Extra context menu item: Similar Pages - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmsimilar.html O8 - Extra context menu item: Backward Links - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmbacklinks.html O8 - Extra context menu item: Translate Page into English - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmtrans.html O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE O9 - Extra 'Tools' menuitem: MSN Messenger Service - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRAM FILES\JAVA\JRE1.5.0_06\BIN\SSV.DLL O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRAM FILES\JAVA\JRE1.5.0_06\BIN\SSV.DLL O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab O16 - DPF: {F9F3920B-2F24-437A-A224-D49F0004A172} (CAlambikCtl Class) - http://www.net-viewer.com/dls/AutoInstall.exe O16 - DPF: {4F5E4276-C120-11D6-A1FD-00508B9D48EA} (dldisplay Class) - http://www.gamehouse.com/ghdlctl.cab |
|
|
|
|
08-08-2006, 02:58 PM
|
#9 (permalink) |
|
Registered User
Join Date: Apr 2006
Location: Missouri
Posts: 386
OS: Windows XP Professional Service Pack 3
|
Well it seems if it is running correctly except that my task manager is still going up to 100% and it won't stop going up there and going back down to a small percentage 10%. It is as if something is working in the background I don't know what though.
|
|
|
|
|
08-12-2006, 07:27 PM
|
#10 (permalink) |
|
Analyst, Security Team
Join Date: Jun 2005
Posts: 3,065
OS: Windows XP
|
Sorry for the delay, not sure where my email went
 Please download SilentRunners.vbs - Right click & choose Save As... SilentRunners.vbs Before proceeding, disable any anti-virus or anti-spyware programs that may block/disable scripts Launch SilentRunners by double-clicking the downloaded file. In the ensuing Window, select 'No' to avoid skipping supplementary searches. Please be patient as the script requires a few minutes to complete. When it's done, you'll receive the prompt "All Done!". It will create a file called "Startup Programs". Post ALL its contents here in your next reply
__________________
|
|
|
|
|
08-13-2006, 06:08 PM
|
#11 (permalink) | |
|
Registered User
Join Date: Apr 2006
Location: Missouri
Posts: 386
OS: Windows XP Professional Service Pack 3
|
Well I think the website has its subscriptions to stuff messed up because I was subscribed to this and for some reason I did not have it subscribed anymore. And do you know of anyway of making it not say originally posted by because when I make a quote it says originally posted by instead of some other thing.
Quote:
|
|
|
|
|
|
08-13-2006, 11:53 PM
|
#12 (permalink) |
|
Analyst, Security Team
Join Date: Jun 2005
Posts: 3,065
OS: Windows XP
|
That log is clean. Let's see if we can catch what is running.
Download Process Explorer. Unzip it to your desktop. Double click on procexp.exe Keep an eye on the "CPU" column. "System Idle Processs" will most likely be taking up a large portion of the CPU. If any other program shows a large number in that column please report it's name here.
__________________
|
|
|
|
|
08-15-2006, 07:10 PM
|
#13 (permalink) |
|
Registered User
Join Date: Apr 2006
Location: Missouri
Posts: 386
OS: Windows XP Professional Service Pack 3
|
Well thank you for the good process manager it told me that my other process manager was telling me incorrect stuff. This process manager gave me more in depth information and also told me that the CPU useage was not really that high unless I had that other process manager up. It also did the same to me in Windows XP I now realize but when I used the XP task manager it told me differnet. But anyways I know the problem to my mom's computer it is her recovery disks from hp. She has recovered it as in did not reformat just basically put everything back on it, it originally had and keep everything else. It is kind of like doing a repair install but a little different. I believe it is just a reprograming disk it reprograms everything like it was when we first bought it. But it will still have everything on it that was there before the reprogramming. I really believe that all the programs get messed up in the process and don't work entirely right. She has done a recover more than once. But I believe the main problem is the OS Windows ME the worst OS ever made. But it does have its ups and downs like Windows 98 they are both almost identical they are both hard to infect with virus's and such. I am going to try to get a cheap usb hard drive and store all the stuff my mom needs on the hard drive and then do a reformat. The thing that bothers me is that she doesn't even have a real ME disk only a recovery disk to totally wipe everything off and put it to exactly like it was when we bought it nothing else what so ever. Ever since I bought this Windows XP Home Edition Service Pack 2 disk I have been wanting to wipe my mom's hard drive off and put this on it but my mom hates XP she says but I think it is a lie I hear her keep repeating over and over she loves her Windows ME. I tried to convice her to install Windows 98 but she says she hates it to and she doesn't even realize it is almost exactly identical to Windows ME... Oh well I guess. You can mark this thread as resolved if you wish I don't want to have anymore trouble with this hunk of junk any longer. The only thing I can think of is have someone convince her to change OS's but I don't know if you could do that. You can try if you wish send her an email at casuwalters@hotmail.com, She really needs to change her OS badly I am sure you would know this as well as I do I am advancing in computers everyday and this is almost the first thing I found out when striving to find out more about computers.
|
|
|
|
| Thread Tools | |
|
|
