a windows scandisk was scheduled...

[Raskolnikov]

W2k : Can we actually schedule a scandisk check or is Windows performing this scan due to a problem ?

[Panama Red]

Look in Scheduled Tasks in the Control Panel and see if it shows up. Or download the msconfig utility for 2K and see what's in the Start Up area.

[Raskolnikov]

there is only one scheduled task. symantec netdetect . schedule : every 4 hrs from 2.09 pm for 24 hrs everyday, starting 4/20/2005 ( i think this is for the expired symantec product cuz there is one in the system) other then this there is no scheduled tasks in here.

[Panama Red]

Anything in Start Up when you run Msconfig? W2K doesn't come with msconfig utiltiy so you have to download it.

http://www.perfectdrivers.com/howto/msconfig.html

[Digitalic]

chkdisk in W2k, scandisk is W9x, will run after a bad shutdown. It is scheduled at startup because it needs exclusive use of the disk and must run before the OS loads.

May be what you`re seeing.

[Raskolnikov]

Hi,

In msconfig under start up tab i dont see any scan schedules. but i have a fishy .exe file here called iconspy. what exactly is iconspy.exe ?

[Panama Red]

Did a little googling and found several listings of iconspy.exe. They all relate to some form of malware/spyware. You should probably do a complete scan with Adware, Spybot, and an online scan at Trendmicro. Then post a Hijack This! log in a new thread. Lobos is the best HJT log reader around these parts and he'll help ya clean out any stagglers.

[Raskolnikov]

here is the hjt log : ) sorry about the delay i had to build a sys.

Logfile of HijackThis v1.99.1
Scan saved at 5:53:19 PM, on 4/25/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Sony\HotKey Utility\HKserv.exe
C:\WINNT\system32\ICONSPY.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\PowerPanel\Program\PcfMgr.exe
F:\!Temp\HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [HKSERV.EXE] C:\Program Files\Sony\HotKey Utility\HKserv.exe
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICONSPY.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\Run: [Ink Monitor] C:\Program Files\EPSON\Ink Monitor\InkMonitor.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\Netscape\Communicator\Program\AIM\aim.exe -cnetwait.odl
O4 - Global Startup: PowerPanel.lnk = C:\Program Files\PowerPanel\Program\PcfMgr.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINNT\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B7C8969E-471D-4F08-A72E-CC4DD7B07CDC}: NameServer = 64.105.204.26,64.105.179.138
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

[Raskolnikov]

it sounds quite funky. iconspy.exe... but its a strong possibility that it is a part of the mouse software.. still working on it.. : D

[Raskolnikov]

Iconspy.exe is innocent. It is the mouse software :S So what do you think about the scheduled disk-scan can it be a bad HD ? (laptop)

[Panama Red]

Easy enuf to find out. Download the hdd manufacturer's diagnostic software, make a boot disk with it and test the hard drive (assuming you have a bootable floppy drive).

[Raskolnikov]

File system on this disk is fat32. Can it be a characteristic of this file type ?

**btw thank you for all your help panamared

[Panama Red]

Originally Posted by Raskolnikov File system on this disk is fat32. Can it be a characteristic of this file type ?

Several articles in MS Knowledge base about running Fat32 with W2K and the limitations involved. Chkdsk only works with NTFS so Scandisk is the correct disk repair tool. Maybe you ought to run a full scandisk scan and see if it will repair any problems.