Well.. someone suggested we make an official computer help thread.. so here it is.
Rules:
1. Anything computer related applies: spyware, virus's, hardware/software installation/upgrading, opinions, etc etc...
2. If you have input pertaining to a particular question..
Rules:
1. Anything computer related applies: spyware, virus's, hardware/software installation/upgrading, opinions, etc etc...
2. If you have input pertaining to a particular question..
the question and respond with your advice, opinion, etc. if you have a picture that better explains a particular question.. inline it.
3. Dont post things that are not questions or responses corresponding to a previously posted item. I would like to think this could be a place where anyone could come and get a timely, Intelligent answer/solution their questions/problems without having to read through pages of crap.
Thank you in advance for those of you who offer your knowledge/expertise.
3. Dont post things that are not questions or responses corresponding to a previously posted item. I would like to think this could be a place where anyone could come and get a timely, Intelligent answer/solution their questions/problems without having to read through pages of crap.
Thank you in advance for those of you who offer your knowledge/expertise.
Actually, now that you mention it, my laptop (Acer Aspire 1400 if it makes any difference) has an annoying tendency to overheat and switch itself off. Usually right in the middle of downloads or films.
Any advice? If not, then ho hum, I'll have to live with it.
Any advice? If not, then ho hum, I'll have to live with it.
Any advice?
Ross, check to see if the fan on the back of your laptop is working (if it has one). If it is not.. its possible you could get a replacement fan at a computer show or off the web somewhere.
If the system is still under warranty.. contact the company.. maybe they could replace it or something?..
if your really out of your mind maybe you could build some sort of carry on water cooling system... doubt that would be worth it thought.
lastly, are you sure it is because of over heating? try running some benchmarks with sisoft sandra (www.download.com is where you can get it) and see if it shuts down on you. Isolate the problem... is there more than one memory stick in it? if so take one out and see if that could be an issue.
I've been having the same problem as Ross. Both my Desktop (P4 3.2 Intel d8765pbz motherboard 1 gb corsiar xms pc3200 radeon 9800 xt audigy 2 zs win xp pro) and laptop Compaq presario 1700 (p3 1000mhz win xp home) seem to shut down after 20 or so min of usage.
this is a recently developed problem as well. within the last 3 weeks id say.
i dont have current virus protection (didnt buy a subscription to norton) so that could be a cause.
ive reformatted and reinstalled win xp on the desktop (losing all my mp3s in the process grrrr) to no avail, the problem remained.
now my laptop which ive been using for the last week seems to have the same problem!
the battery is shit and i just use it off the power cord so i dont know if that could be an issue (it wasnt before.)
also fazed is my only tech support so thanks in advance.
this is a recently developed problem as well. within the last 3 weeks id say.
i dont have current virus protection (didnt buy a subscription to norton) so that could be a cause.
ive reformatted and reinstalled win xp on the desktop (losing all my mp3s in the process grrrr) to no avail, the problem remained.
now my laptop which ive been using for the last week seems to have the same problem!
the battery is shit and i just use it off the power cord so i dont know if that could be an issue (it wasnt before.)
also fazed is my only tech support so thanks in advance.
The fan's working. I goes into overdrive just before it shuts down.
I cannot think what else it might be as it's been through about 3 full HD formats and I'm very wary about viruses. Disabling certain components doesn't seem to help either.
To be honest I think that it's a design fault more than anything. The intake vent for the fan is on the base of the computer and therefore cannot take in enough cool air at times.
Many thanks for taking the time to reply though.
I cannot think what else it might be as it's been through about 3 full HD formats and I'm very wary about viruses. Disabling certain components doesn't seem to help either.
To be honest I think that it's a design fault more than anything. The intake vent for the fan is on the base of the computer and therefore cannot take in enough cool air at times.
Many thanks for taking the time to reply though.
I cannot think what else it might be as it's been through about 3 full HD formats and I'm very wary about viruses. Disabling certain components doesn't seem to help either.
this reminds me that ive tested both 512 sticks of ram in my desktop and taken out the sound card during installs and tried all the combonations of compenents, but the problem is bad no matter what configuration its in. harumpf.
some interesting problems..
As far as
Is concerned.. check into your power supply... Ive run into issues where the power supply would be cool enough when the computer was idle.. but since the fans werent working.. it would overheat when the CPU was under stress. As far as the laptop heat issue is conerned.. definitly contact the manufacturer and see if there were any other problems reported like that. Maybe you are entitled to a replacement or something.
As far as
computers shutting down for no reason
Is concerned.. check into your power supply... Ive run into issues where the power supply would be cool enough when the computer was idle.. but since the fans werent working.. it would overheat when the CPU was under stress. As far as the laptop heat issue is conerned.. definitly contact the manufacturer and see if there were any other problems reported like that. Maybe you are entitled to a replacement or something.
I've been having the same problem as Ross. Both my Desktop (P4 3.2 Intel d8765pbz motherboard 1 gb corsiar xms pc3200 radeon 9800 xt audigy 2 zs win xp pro) and laptop Compaq presario 1700 (p3 1000mhz win xp home) seem to shut down after 20 or so min of usage.
this is a recently developed problem as well. within the last 3 weeks id say.
i dont have current virus protection (didnt buy a subscription to norton) so that could be a cause.
ive reformatted and reinstalled win xp on the desktop (losing all my mp3s in the process grrrr) to no avail, the problem remained.
now my laptop which ive been using for the last week seems to have the same problem!
the battery is shit and i just use it off the power cord so i dont know if that could be an issue (it wasnt before.)
also fazed is my only tech support so thanks in advance.
this is a recently developed problem as well. within the last 3 weeks id say.
i dont have current virus protection (didnt buy a subscription to norton) so that could be a cause.
ive reformatted and reinstalled win xp on the desktop (losing all my mp3s in the process grrrr) to no avail, the problem remained.
now my laptop which ive been using for the last week seems to have the same problem!
the battery is shit and i just use it off the power cord so i dont know if that could be an issue (it wasnt before.)
also fazed is my only tech support so thanks in advance.
Well, that was happening when I got my new case. I went out and got a better power supply and everything, when the voltage intake was default set at European.
From: jpkeates Error: Information for this account is currently unavailable
Date: 6/12/04 @ 2:56 AM
9
Ross,
Test your theory by resting the back of the laptop on something so the air gap is increased. A slight tilit shouldn't stopyou working. Also, check that the gap isn't blocked inside, and there is an air channel round the components. Sometimes in a laptop one of the wires can block the air channel. Does really sound like an over heatting problem not a virus.
Mr Member,
Power supply would be my thought also. If you bought a standard case or system, the power supply is usually one of the things where the cheapest works. Try a newer higher powered version if you can. They're not that expensive.
Test your theory by resting the back of the laptop on something so the air gap is increased. A slight tilit shouldn't stopyou working. Also, check that the gap isn't blocked inside, and there is an air channel round the components. Sometimes in a laptop one of the wires can block the air channel. Does really sound like an over heatting problem not a virus.
Mr Member,
Power supply would be my thought also. If you bought a standard case or system, the power supply is usually one of the things where the cheapest works. Try a newer higher powered version if you can. They're not that expensive.
I used to work at Gateway, and one of the issues that we had with the laptops is that the system wasn't properly detecting the cpu temp. So it wouldn't turn the fan on high when it needed it most. After several complaints about the issue a revised bios update was release and that seemed to fix the problem. I'd keep an eye out for any bios upgrades that they offer for that laptop.
Hope that helps.
Hope that helps.
Damn i could have used this thread yesterday :(
Post some more questions so I can answer and feel important and stuff...
Where can I download more RAM for my PC?
Actually, here's a question, is it possible to get FlashGet to integrate with Firefox?
my aunt once said she had a floppy stuck in her harddrive ...she thought the tower was called a hard drive and her daughter thinks its called a modem they are crazy
my laptop has an annoying tendency to overheat and switch itself off. Any advice?
Buy one of those laptop cooler bases that have fans in them, only cost about $20. :)
is it possible to get FlashGet to integrate with Firefox?
You will have to elaborate on that one. What is "flashget"? What is "firefox"
Where can I download more RAM for my PC?
I hope that wasnt a serious question.
http://www.fazed.org/forum/?p=slorum&id=13543&last=1
my bust. someone with info about cool email client please throw me a bone. :[
my bust. someone with info about cool email client please throw me a bone. :[
no angel said mozilla thunderbird, and it looks good enough to me. thx.
baba.. seriously just go to www.download.com and look up some email clients.
http://download.com.com/3150-2367-0.html?tag=dir
There is the direct link to email clients.. some are free.. some you have to pay for. I would suggest downloading some of the free ones, test them out. See what YOU like best.
http://download.com.com/3150-2367-0.html?tag=dir
There is the direct link to email clients.. some are free.. some you have to pay for. I would suggest downloading some of the free ones, test them out. See what YOU like best.
EUDORA is a popular program too from what i understand
CompuGurus,
I've been running Spybot - Search and Destroy as Ad-Aware on my dad's XP machine, and there are a few spam items in the registry that it finds, yet can't seem to get rid of. I also found the same to be true when I tried to clean out my friend's XP machine.
Is there some kind of known problem with Spybot/Ad-Aware and Windows XP that prevents them from cleaning this crap out?
Any advice on getting the friggin' popup ads off my dad's computer would be a tremendous help, as he constantly asks me to do try and clean it up.
I've been running Spybot - Search and Destroy as Ad-Aware on my dad's XP machine, and there are a few spam items in the registry that it finds, yet can't seem to get rid of. I also found the same to be true when I tried to clean out my friend's XP machine.
Is there some kind of known problem with Spybot/Ad-Aware and Windows XP that prevents them from cleaning this crap out?
Any advice on getting the friggin' popup ads off my dad's computer would be a tremendous help, as he constantly asks me to do try and clean it up.
From: Hot Car L tugged on Superman's cape, but he won't mess around with Jim
Date: 6/12/04 @ 2:21 PM
24
EUDORA is a popular program too from what i understand
Easiest spam filters I have found.
CompuGurus
Yea spanky.. i ran into some real real difficult to get rid of spyware the other day
First step man.. find out what ad-aware/spybot is identifying it as. Is ad-aware set to automatically scan the next time you reboot? If not.. that might get rid of it permenantly.
Otherwise.. your next step would be to go to google.com and look up the exact name of the spyware. Not teh file name that is infected. quite often, the infected file (often in the system32 dir, and often a DLL file) will rename itself every time you reboot, or every time you attempt to get rid of it. Look up the name of the entity and see what other people have done
alot of times, what other have done to get rid of the infestation permenantly, is remove values from the registry, and then rebooting to the Recovery console (if using win2k, or xp) and manually deleting the file in question.
Let me know what the name of the entity is and maybe i could find some info on it for you.. or maybe ive dealt with it before.
ALSO... download a program called "Hijack This"... it is being used alot now to remove shit that ad-aware doesnt detect.
Other IE browser settings to consider disabling:
go to tools > internet options > advanced tab > disable "enable install on demand" and also disable "enable third party browser extenstions"
Try that if whatever it is keeps coming back.
run hijack this and post a scan log
damn! 8-1 beat me to it :(
Hijack This log file:
Logfile of HijackThis v1.97.7
Scan saved at 4:16:29 PM, on 6/12/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Iomega\AutoDisk\ADUserMon.exe
C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\2Wire\Gateway\2PortalMon.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\documents and settings\james h. morelock\local settings\temp\LmOhkv9.exe
C:\WINDOWS\System32\joibnc.exe
C:\WINDOWS\System32\crelhelp.exe
C:\WINDOWS\System32\wcpsvit.exe
C:\WINDOWS\System32\ctfax11n.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Iomega\AutoDisk\ADService.exe
C:\WINDOWS\System32\VtijqA2.exe
C:\WINDOWS\System32\Wpj2mnCV.exe
C:\Installers\HijackThis.exe
C:\Program Files\Messenger\msmsgs.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bellsouth.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.myexexex.com/searchbar.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.myexexex.com/search.php?said=spage&qq=%s
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://c:/spad/start.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.myexexex.com/search.php?said=spage&qq=%s
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by BellSouth
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\Userinit.exe
O2 - BHO: (no name) - {0000607D-D204-42C7-8E46-216055BF9918} - C:\WINDOWS\mxTarget.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [ADUserMon] C:\Program Files\Iomega\AutoDisk\ADUserMon.exe
O4 - HKLM\..\Run: [Iomega Drive Icons] C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
O4 - HKLM\..\Run: [Deskup] C:\Program Files\Iomega\DriveIcons\deskup.exe /IMGSTART
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [2wSysTray] C:\Program Files\2Wire\Gateway\2PortalMon.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [LmOhkv9.exe] C:\documents and settings\james h. morelock\local settings\temp\LmOhkv9.exe
O4 - HKLM\..\Run: [4SJ#8Y745N9X#@] C:\WINDOWS\System32\HotEkc.exe
O4 - HKLM\..\Run: [xglzjx] C:\WINDOWS\System32\joibnc.exe
O4 - HKLM\..\Run: [573V38i] crelhelp.exe
O4 - HKCU\..\Run: [WINT] C:\WINDOWS\System32\wcpsvit.exe
O4 - HKCU\..\Run: [Kws9RUG3P] ctfax11n.exe
O4 - HKCU\..\Run: [NoAdware] "C:\Program Files\NoAdware\NoAdware.exe" /s
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O4 - Global Startup: MySoftware NewsFlash.lnk = C:\Program Files\Common Files\MySoftware\NewsFlsh.exe
O9 - Extra button: Microsoft® JavaScript® Console (HKLM)
O9 - Extra 'Tools' menuitem: JavaScript Console (HKLM)
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O9 - Extra button: Microsoft® JavaScript® Console (HKCU)
O9 - Extra 'Tools' menuitem: JavaScript Console (HKCU)
O14 - IERESET.INF: START_PAGE_URL=http://www.bellsouth.net
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://support.fastaccess.com/sdccommon/download/tgctlcm.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/swdir.cab
O16 - DPF: {19E28AFC-EAE3-4CE5-AC83-2407B42F57C9} (MSSecurityAdvisor Class) - http://download.microsoft.com/download/0/5/c/05c905f4-dd30-427d-a3de-373c3e5552f c/msSecAdv.cab?1066588170765
O16 - DPF: {1C78AB3F-A857-482E-80C0-3A1E5238A565} - file://C:\install.cab
O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540002} (CInstall Class) - http://www.wildtangent.com/webdrivers/webinstall/shockwave/Install.cab
O16 - DPF: {2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} (MiniBugTransporterX Class) - http://download.weatherbug.com/minibug/tricklers/AWS/MiniBugTransporter.cab?RND=
O16 - DPF: {3AF4DACE-36ED-42EF-9DFC-ADC34DA30CFF} (PatchInstaller.Installer) -
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/20031216/qtinstall.info.apple.com/mickey/us/ win/QuickTimeInstaller.exe
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37647.876099537
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
-------------------------------------------------------------------------------- -----------------------
I've selected 14 files that I think are probably safe to delete, but I wanted to get some 2nd/3rd opinions. Please give me some advice on which files from this list can/should be deleted.
Logfile of HijackThis v1.97.7
Scan saved at 4:16:29 PM, on 6/12/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Iomega\AutoDisk\ADUserMon.exe
C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\2Wire\Gateway\2PortalMon.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\documents and settings\james h. morelock\local settings\temp\LmOhkv9.exe
C:\WINDOWS\System32\joibnc.exe
C:\WINDOWS\System32\crelhelp.exe
C:\WINDOWS\System32\wcpsvit.exe
C:\WINDOWS\System32\ctfax11n.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Iomega\AutoDisk\ADService.exe
C:\WINDOWS\System32\VtijqA2.exe
C:\WINDOWS\System32\Wpj2mnCV.exe
C:\Installers\HijackThis.exe
C:\Program Files\Messenger\msmsgs.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bellsouth.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.myexexex.com/searchbar.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.myexexex.com/search.php?said=spage&qq=%s
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://c:/spad/start.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.myexexex.com/search.php?said=spage&qq=%s
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by BellSouth
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\Userinit.exe
O2 - BHO: (no name) - {0000607D-D204-42C7-8E46-216055BF9918} - C:\WINDOWS\mxTarget.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [ADUserMon] C:\Program Files\Iomega\AutoDisk\ADUserMon.exe
O4 - HKLM\..\Run: [Iomega Drive Icons] C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
O4 - HKLM\..\Run: [Deskup] C:\Program Files\Iomega\DriveIcons\deskup.exe /IMGSTART
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [2wSysTray] C:\Program Files\2Wire\Gateway\2PortalMon.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [LmOhkv9.exe] C:\documents and settings\james h. morelock\local settings\temp\LmOhkv9.exe
O4 - HKLM\..\Run: [4SJ#8Y745N9X#@] C:\WINDOWS\System32\HotEkc.exe
O4 - HKLM\..\Run: [xglzjx] C:\WINDOWS\System32\joibnc.exe
O4 - HKLM\..\Run: [573V38i] crelhelp.exe
O4 - HKCU\..\Run: [WINT] C:\WINDOWS\System32\wcpsvit.exe
O4 - HKCU\..\Run: [Kws9RUG3P] ctfax11n.exe
O4 - HKCU\..\Run: [NoAdware] "C:\Program Files\NoAdware\NoAdware.exe" /s
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O4 - Global Startup: MySoftware NewsFlash.lnk = C:\Program Files\Common Files\MySoftware\NewsFlsh.exe
O9 - Extra button: Microsoft® JavaScript® Console (HKLM)
O9 - Extra 'Tools' menuitem: JavaScript Console (HKLM)
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O9 - Extra button: Microsoft® JavaScript® Console (HKCU)
O9 - Extra 'Tools' menuitem: JavaScript Console (HKCU)
O14 - IERESET.INF: START_PAGE_URL=http://www.bellsouth.net
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://support.fastaccess.com/sdccommon/download/tgctlcm.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/swdir.cab
O16 - DPF: {19E28AFC-EAE3-4CE5-AC83-2407B42F57C9} (MSSecurityAdvisor Class) - http://download.microsoft.com/download/0/5/c/05c905f4-dd30-427d-a3de-373c3e5552f c/msSecAdv.cab?1066588170765
O16 - DPF: {1C78AB3F-A857-482E-80C0-3A1E5238A565} - file://C:\install.cab
O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540002} (CInstall Class) - http://www.wildtangent.com/webdrivers/webinstall/shockwave/Install.cab
O16 - DPF: {2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} (MiniBugTransporterX Class) - http://download.weatherbug.com/minibug/tricklers/AWS/MiniBugTransporter.cab?RND=
O16 - DPF: {3AF4DACE-36ED-42EF-9DFC-ADC34DA30CFF} (PatchInstaller.Installer) -
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/20031216/qtinstall.info.apple.com/mickey/us/ win/QuickTimeInstaller.exe
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37647.876099537
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
-------------------------------------------------------------------------------- -----------------------
I've selected 14 files that I think are probably safe to delete, but I wanted to get some 2nd/3rd opinions. Please give me some advice on which files from this list can/should be deleted.
O4 - HKLM\..\Run: [LmOhkv9.exe] C:\documents and settings\james h. morelock\local settings\temp\LmOhkv9.exe
Don't delete that Jay, that's an essential windows program. ;-P On a side note, your surname is morelock?
i would question the following running processes...
C:\Program Files\2Wire\Gateway\2PortalMon.exe
C:\documents and settings\james h. morelock\local settings\temp\LmOhkv9.exe
C:\WINDOWS\System32\joibnc.exe
C:\WINDOWS\System32\crelhelp.exe
C:\WINDOWS\System32\wcpsvit.exe
C:\WINDOWS\System32\ctfax11n.exe
C:\WINDOWS\System32\VtijqA2.exe
C:\WINDOWS\System32\Wpj2mnCV.exe
Does ad-aware detect any of these files as malicious?.. if so terminate that process. Find out what ad-aware says about that particular bug.. Look up
and i would delete definitly these
O4 - HKLM\..\Run: [LmOhkv9.exe] C:\documents and settings\james h. morelock\local settings\temp\LmOhkv9.exe
O4 - HKLM\..\Run: [xglzjx] C:\WINDOWS\System32\joibnc.exe
O4 - HKCU\..\Run: [WINT] C:\WINDOWS\System32\wcpsvit.exe
I dont know about the others though.. i dont have as much experience looking at these log files. There are forums that specialize in this however.
C:\Program Files\2Wire\Gateway\2PortalMon.exe
C:\documents and settings\james h. morelock\local settings\temp\LmOhkv9.exe
C:\WINDOWS\System32\joibnc.exe
C:\WINDOWS\System32\crelhelp.exe
C:\WINDOWS\System32\wcpsvit.exe
C:\WINDOWS\System32\ctfax11n.exe
C:\WINDOWS\System32\VtijqA2.exe
C:\WINDOWS\System32\Wpj2mnCV.exe
Does ad-aware detect any of these files as malicious?.. if so terminate that process. Find out what ad-aware says about that particular bug.. Look up
and i would delete definitly these
O4 - HKLM\..\Run: [LmOhkv9.exe] C:\documents and settings\james h. morelock\local settings\temp\LmOhkv9.exe
O4 - HKLM\..\Run: [xglzjx] C:\WINDOWS\System32\joibnc.exe
O4 - HKCU\..\Run: [WINT] C:\WINDOWS\System32\wcpsvit.exe
I dont know about the others though.. i dont have as much experience looking at these log files. There are forums that specialize in this however.
that's an essential windows program
how is that essential?
how is that essential?
I was being sarcastic. An exe being run from a temp folder, I mean come on. :)
sarcastic
damn.. i must have drank way too much this weekend.
On a side note, your surname is morelock?
Yes. And beware that any crank calls or any other invasions of my private life will result in a powder-filled envelope being sent to the culprit's house.
Seriously tho, thanks Afkamm and SeVeN. The advice is much appreciated.
powder-filled envelope
and I'm not talking about the good kind of powder. :)
From: jpkeates Error: Information for this account is currently unavailable
Date: 6/12/04 @ 4:29 PM
36
Had a spanky morelock as a fag at Eton
Thought he's been shot in the great war.
Could be related.
He was an ugly fucker too.
</not_quite_sure_what_that_was>
Thought he's been shot in the great war.
Could be related.
He was an ugly fucker too.
</not_quite_sure_what_that_was>
</not_quite_sure_what_that_was>
i found it funny anyway
no prob spanky
Running processes:
C:\WINDOWS\SOUNDMAN.EXE <-- A program to do with your sound card?
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe <-- If you're not burning cd's ever day then stop this from loading at startup.
C:\Program Files\QuickTime\qttask.exe <-- Don't delete file, just stop it loading on startup.
C:\Program Files\BroadJump\Client Foundation\CFD.exe <-- Don't delete file, just stop it loading on startup.
C:\documents and settings\james h. morelock\local settings\temp\LmOhkv9.exe
C:\WINDOWS\System32\joibnc.exe
C:\WINDOWS\System32\crelhelp.exe
C:\WINDOWS\System32\wcpsvit.exe
C:\WINDOWS\System32\ctfax11n.exe
C:\WINDOWS\System32\VtijqA2.exe
C:\WINDOWS\System32\Wpj2mnCV.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.myexexex.com/searchbar.php <-- Delete
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.myexexex.com/search.php?said=spage&qq=%s <-- Delete
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://c:/spad/start.html <-- Delete
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.myexexex.com/search.php?said=spage&qq=%s <-- Delete
O2 - BHO: (no name) - {0000607D-D204-42C7-8E46-216055BF9918} - C:\WINDOWS\mxTarget.dll <-- Delete, also locate file and delete.
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE <-- This for your soundcard?
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" <-- You don't need this to run at boot up.
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe <-- You don't need this to run at boot up.
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers <-- You don't need this to run at boot up.
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime <-- You don't need this to run at boot up.
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe <-- You don't need this to run at boot up.
O4 - HKLM\..\Run: [LmOhkv9.exe] C:\documents and settings\james h. morelock\local settings\temp\LmOhkv9.exe <-- Delete, also locate file and delete.
O4 - HKLM\..\Run: [4SJ#8Y745N9X#@] C:\WINDOWS\System32\HotEkc.exe <-- Delete, also locate file and delete.
O4 - HKLM\..\Run: [xglzjx] C:\WINDOWS\System32\joibnc.exe <-- Delete, also locate file and delete.
O4 - HKLM\..\Run: [573V38i] crelhelp.exe <-- Delete, also locate file and delete.
O4 - HKCU\..\Run: [WINT] C:\WINDOWS\System32\wcpsvit.exe <-- Delete, also locate file and delete.
O4 - HKCU\..\Run: [Kws9RUG3P] ctfax11n.exe <-- Delete, also locate file and delete.
C:\WINDOWS\SOUNDMAN.EXE <-- A program to do with your sound card?
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe <-- If you're not burning cd's ever day then stop this from loading at startup.
C:\Program Files\QuickTime\qttask.exe <-- Don't delete file, just stop it loading on startup.
C:\Program Files\BroadJump\Client Foundation\CFD.exe <-- Don't delete file, just stop it loading on startup.
C:\documents and settings\james h. morelock\local settings\temp\LmOhkv9.exe
C:\WINDOWS\System32\joibnc.exe
C:\WINDOWS\System32\crelhelp.exe
C:\WINDOWS\System32\wcpsvit.exe
C:\WINDOWS\System32\ctfax11n.exe
C:\WINDOWS\System32\VtijqA2.exe
C:\WINDOWS\System32\Wpj2mnCV.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.myexexex.com/searchbar.php <-- Delete
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.myexexex.com/search.php?said=spage&qq=%s <-- Delete
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://c:/spad/start.html <-- Delete
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.myexexex.com/search.php?said=spage&qq=%s <-- Delete
O2 - BHO: (no name) - {0000607D-D204-42C7-8E46-216055BF9918} - C:\WINDOWS\mxTarget.dll <-- Delete, also locate file and delete.
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE <-- This for your soundcard?
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" <-- You don't need this to run at boot up.
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe <-- You don't need this to run at boot up.
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers <-- You don't need this to run at boot up.
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime <-- You don't need this to run at boot up.
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe <-- You don't need this to run at boot up.
O4 - HKLM\..\Run: [LmOhkv9.exe] C:\documents and settings\james h. morelock\local settings\temp\LmOhkv9.exe <-- Delete, also locate file and delete.
O4 - HKLM\..\Run: [4SJ#8Y745N9X#@] C:\WINDOWS\System32\HotEkc.exe <-- Delete, also locate file and delete.
O4 - HKLM\..\Run: [xglzjx] C:\WINDOWS\System32\joibnc.exe <-- Delete, also locate file and delete.
O4 - HKLM\..\Run: [573V38i] crelhelp.exe <-- Delete, also locate file and delete.
O4 - HKCU\..\Run: [WINT] C:\WINDOWS\System32\wcpsvit.exe <-- Delete, also locate file and delete.
O4 - HKCU\..\Run: [Kws9RUG3P] ctfax11n.exe <-- Delete, also locate file and delete.
Seriously Jay, stop so many pr0n sites. :-P
ok, i have a question..
my work machine (dell lc500 i think) opens the system32 folder every time it boots up. any clues??
my work machine (dell lc500 i think) opens the system32 folder every time it boots up. any clues??
From: jpkeates Error: Information for this account is currently unavailable
Date: 6/12/04 @ 5:41 PM
41
And runs what???
it doesnt run anything, it just opens at start up. sometime if i close it right away it will open again.
my work machine (dell lc500 i think) opens the system32 folder every time it boots up. any clues??
i would scan it for a virus definitly.. but that most likely isnt the case.
Somehow that folder got set to auto open when the operating system loads...
try Start > run...> type "msconfig" > hit enter.
Under "boot.ini" see if there is anything there that refers to your system32 folder... Also check the services tab, and the startup tab for these as well. Let us know if that helps you any
From: jpkeates Error: Information for this account is currently unavailable
Date: 6/12/04 @ 5:44 PM
44
There's so much in there it could be.
Have you tried logging your start up?
Have you tried logging your start up?
Seriously Jay, stop so many pr0n sites. :-P
It's my dad's machine. I surf porn on my own computer. :)
"msconfig"
ill give it a try on monday
Have you tried logging your start up?
no, but i will try that monday too
thanks
From: jpkeates Error: Information for this account is currently unavailable
Date: 6/12/04 @ 5:46 PM
47
I really hope you and your dad's sites don't intersect..
From: Afkamm
his are all right spank
system32 folder every time it boots up. any clues??
happens somethimes with a run data link library failure (rundll32 /%sys% something.dll
look in your registry under these keys for something that just points to your sys32 folder
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
I've got one of these http://www.cool-icam.com/web/eng/product/plus.html
and i used to be able to use it as a webcam running 2000 and broadcasting over yahoo and msn messengers. ever since getting XP it wont work as a cam, i can chose it, but all that comes up is a black screen.
I've downloaded and re-installed the driver linked on that site a number of times
but still no luck.
any ideas?
and i used to be able to use it as a webcam running 2000 and broadcasting over yahoo and msn messengers. ever since getting XP it wont work as a cam, i can chose it, but all that comes up is a black screen.
I've downloaded and re-installed the driver linked on that site a number of times
but still no luck.
any ideas?
i have one more question..
i currently have my A+ and MCP certs with 3 exams left for my MCSE. problem is i started school a long time ago and kinda fell off my study routine. i have been trying to get back into it but the course im on is really boring (active dir design) and i dont study for more than an hour most times.
so my question is, should i keep at the MCSE thing or move on to cisco and linux (i had a class on those ages ago and really enjoyed them)
i currently have my A+ and MCP certs with 3 exams left for my MCSE. problem is i started school a long time ago and kinda fell off my study routine. i have been trying to get back into it but the course im on is really boring (active dir design) and i dont study for more than an hour most times.
so my question is, should i keep at the MCSE thing or move on to cisco and linux (i had a class on those ages ago and really enjoyed them)
| forum | login | new user | top |