|
|||||||
![]() |
|
|
LinkBack | Thread Tools | Search this Thread | Rate Thread | Display Modes |
|
|
#1 | ||
|
Its the Dark Side!
|
I think my OS is falling apart
The OS on my Dell has been acting funny lately. On random occasions when i do something like click a button, open a window or anything, i get this "do you wish to debug?" prompt, if I click cance,l explorer crashes and reloads (it is WinXP, so i belive that is how XP is supposed to handle explorer crashes).
The other problems im having include general slow down (especially win WMP). once it took a good 30 seconds to load My Computer, and there wasn't processing time before hand. So, now im getting concerned. I really dont want to have to format the HDD so prematurely. So does anybody have any opinions on how to possibly fix these problems. And if I ulimately have to format, would anybody know if formatting the HD myself and reinstalling windows myself would void my warranty?
__________________
CN ![]()
|
||
|
|
|
|
|
#2 |
|
Served with Pride
Staff
Premium Member
|
Do you regularly run Adaware and Spybot? How bout Disk Cleanup and Defrag? Disk Cleanup will get rid of all the temp files. Might also go in the Tools of IE and delete cookies. See if that stuff perks it up.
|
|
|
|
|
|
#3 |
|
Its the Dark Side!
|
Yep, i clean my cookes on a regular basis. mind you, i havent done so often for my other two browsers. ive been running adaware and spybot alot recently, and i havent had any spyware installed lately. ive tried defragging my hard drive and scandisk, but it doesnt seem to do much. Ive thought about shutting down some processes, but im not sure which ones are safe to shut down
|
|
|
|
|
|
#4 |
|
Served with Pride
Staff
Premium Member
|
I don't get concerned with processes, but take a look at running programs in start tab after running msconfig. If you see any strange stuff there, it might be time for a Hijack this! log.
|
|
|
|
|
|
#5 |
|
Its the Dark Side!
|
Yeah, im seeing some strange items in the startup list in msconfig. ive disabled them, but just them being there doesnt exactly make me feel all warm and fuzzy!
im gonna install Hijack this! i was planning on doing so a while ago, but I guess i forgot
|
|
|
|
|
|
#6 |
|
Its the Dark Side!
|
alright, here's my log:
ogfile of HijackThis v1.97.7 Scan saved at 6:16:00 PM, on 6/25/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\Windows\System32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\System32\drivers\CDAC11BA.EXE C:\WINDOWS\System32\CTsvcCDA.exe C:\Program Files\Norton AntiVirus\navapsvc.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\UltraVNC\WinVNC.exe C:\Windows\System32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\Program Files\Creative\Shared Files\CamTray.exe C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe C:\Program Files\ATI Multimedia\MAIN\ATISched.EXE C:\Program Files\CoolMon\CoolMon.exe C:\Program Files\Folding@Home\winFAH.exe C:\Program Files\Folding@Home\FahCore_65.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Documents and Settings\Stephane\My Documents\Downloads\System Security Software - UPGRADES!\hijackthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:/Documents%20and%20Settings/Stephane/My%20Documents/html/main.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = http://localhost; R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file) O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.1629.0\en-us\msntb.dll O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe O4 - HKLM\..\Run: [WinVNC] "C:\Program Files\UltraVNC\WinVNC.exe" -servicehelper O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe" O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CamTray.exe O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe O4 - HKCU\..\Run: [ATI Scheduler] C:\Program Files\ATI Multimedia\MAIN\ATISched.EXE O4 - HKCU\..\Run: [ATI Launchpad] "C:\Program Files\ATI Multimedia\main\LaunchPd.exe" O4 - Startup: CoolMon.lnk = C:\Program Files\CoolMon\CoolMon.exe O4 - Startup: Folding@home 4.00.lnk = ? O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html O8 - Extra context menu item: Backward &Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html O8 - Extra context menu item: Cac&hed Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html O8 - Extra context menu item: Si&milar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM) O9 - Extra button: ATI TV (HKLM) O9 - Extra button: Messenger (HKLM) O9 - Extra 'Tools' menuitem: Messenger (HKLM) O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/s...irector/sw.cab O16 - DPF: {2253F320-AB68-4A07-917D-4F12D8884A06} (ChainCast VMR Client Proxy) - http://www.streamaudio.com/download/ccpm_0237.cab O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/S...in/AvSniff.cab O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) - http://office.microsoft.com/officeup...ntent/opuc.cab O16 - DPF: {4E888414-DB8F-11D1-9CD9-00C04F98436A} (Microsoft.WinRep) - https://webresponse.one.microsoft.co...veX/winrep.cab O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/18afebbac2a0c5b...p/RdxIE601.cab O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/S.../bin/cabsa.cab O16 - DPF: {8EDAD21C-3584-4E66-A8AB-EB0E5584767D} - http://toolbar.google.com/data/GoogleActivate.cab O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.co...026.4052777778 O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/s...sh/swflash.cab O16 - DPF: {F5192746-22D6-41BD-9D2D-1E75D14FBD3C} - http://download.rfwnad.com/cab/crack.CAB |
|
|
|
|
|
#7 |
|
Served with Pride
Staff
Premium Member
|
I'm no expert on Hijack. In order to get better attention, why don't you start a new thread with Hijack This log in the title. That will get Lobos attention. He seems to have a good handle on these things.
|
|
|
|
|
|
#8 |
|
Its the Dark Side!
|
alright, infact ive got another system which might need a hijack this log as well. i post them both. thanks for the help Panama Red!
|
|
|
|
|
|
#9 |
|
Member (10 bit)
|
O16 - DPF: {F5192746-22D6-41BD-9D2D-1E75D14FBD3C} - http://download.rfwnad.com/cab/crack.CAB
DELETE IT, i THINK heres why: http://vil.nai.com/vil/content/v_123106.htm |
|
|
|
|
|
#10 |
|
Its the Dark Side!
|
Going back to that debug problem for a sec, here is a pic of what im talking about. this has been popping up on random occassions.
|
|
|
|
![]() |
| Bookmarks |
| Thread Tools | Search this Thread |
| Display Modes | Rate This Thread |
|
|