Please check Hijack this log. I may have fixed this PC but maybe not. Performed repair from installation disk and then repeated SFC /scannow until ran to completion.
Use AVG Security but PC compromised. Appreciate recommendations regarding other protection.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:03:36 AM, on 9/13/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.e
C:\WINDOWS\system32\winlog
C:\WINDOWS\system32\servic
C:\WINDOWS\system32\lsass.
C:\WINDOWS\system32\nvsvc3
C:\WINDOWS\system32\svchos
C:\WINDOWS\System32\svchos
C:\WINDOWS\system32\spools
C:\Program Files\AVG\AVG8\IdentityPro
C:\WINDOWS\Explorer.EXE
D:\bin\httpd.exe
C:\Program Files\Google\Update\1.2.18
D:\bin\httpd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDev
C:\PROGRA~1\AVG\AVG8\avgwd
C:\PROGRA~1\AVG\AVG8\avgfw
C:\Program Files\AVG\AVG8\IdentityPro
C:\PROGRA~1\AVG\AVG8\avgam
C:\Program Files\Bonjour\mDNSResponde
C:\PROGRA~1\AVG\AVG8\avgrs
C:\WINDOWS\system32\cisvc.
C:\PROGRA~1\AVG\AVG8\avgns
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre6\bin\jusche
C:\Program Files\Java\jre6\bin\jqs.ex
C:\Program Files\iTunes\iTunesHelper.
C:\Program Files\MozyHome\mozybackup.
C:\Program Files\Common Files\ACD Systems\EN\DevDetect.exe
C:\Program Files\AVG\AVG8\IdentityPro
C:\PROGRA~1\AVG\AVG8\avgtr
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\WINDOWS\system32\RUNDLL
C:\WINDOWS\system32\ctfmon
C:\Program Files\Google\GoogleToolbar
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.e
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Adobe\Adobe Bridge CS4\Bridge.exe
C:\Program Files\PFU\ScanSnap\CardMin
C:\Program Files\AVG\AVG8\IdentityPro
D:\bin\ApacheMonitor.exe
C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
C:\Program Files\StorageCraft\ShadowP
C:\Program Files\MozyHome\mozystat.ex
C:\Program Files\StorageCraft\ShadowP
C:\Program Files\PFU\ScanSnap\Driver\
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\WINDOWS\system32\svchos
C:\WINDOWS\System32\vssvc.
C:\WINDOWS\system32\vsnapv
C:\WINDOWS\system32\Search
C:\Program Files\Citrix\GoToMyPC\g2sv
C:\Program Files\iPod\bin\iPodService
C:\Program Files\Citrix\GoToMyPC\g2co
C:\Program Files\Citrix\GoToMyPC\g2pr
C:\Program Files\Citrix\GoToMyPC\g2tr
C:\WINDOWS\system32\cidaem
C:\WINDOWS\system32\cidaem
C:\WINDOWS\system32\cidaem
C:\WINDOWS\system32\cidaem
C:\WINDOWS\system32\Search
C:\WINDOWS\system32\cidaem
D:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\RUBotted\TMRUBotted.
C:\Program Files\Trend Micro\RUBotted\TMRUBottedT
C:\Program Files\Trend Micro\HijackThis\HijackThi
R1 - HKCU\Software\Microsoft\Wi
R3 - URLSearchHook: (no name) - *{CFBFAE00-17A6-11D0-99CB-
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5
O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-F
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4
O2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-0
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-C
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-C
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-7
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-E
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-6
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-0
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0
O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-0
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\system32\winsys
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusche
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWa
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe
O4 - HKLM\..\Run: [MP10_EnsureFileVer] C:\WINDOWS\inf\unregmp2.ex
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.
O4 - HKLM\..\Run: [GoToMyPC] "C:\Program Files\Citrix\GoToMyPC\g2sv
O4 - HKLM\..\Run: [Device Detector] DevDetect.exe -autorun
O4 - HKLM\..\Run: [AVGIDS] "C:\Program Files\AVG\AVG8\IdentityPro
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtr
O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\COMMON~1\Adobe
O4 - HKLM\..\Run: [Adobe_ID0ENQBO] C:\PROGRA~1\COMMON~1\Adobe
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceMana
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTr
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.
O4 - HKLM\..\Run: [TMRUBottedTray] "C:\Program Files\Trend Micro\RUBotted\TMRUBottedT
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbar
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.e
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe
O4 - HKCU\..\Run: [AdobeBridge] "C:\Program Files\Adobe\Adobe Bridge CS4\Bridge.exe" -stealth
O4 - Global Startup: CardMinder Viewer.lnk = ?
O4 - Global Startup: Conversion to PDF with ScanSnap Organizer.lnk = ?
O4 - Global Startup: Desktop Manager.lnk = C:\Program Files\Research In Motion\BlackBerry\DesktopM
O4 - Global Startup: Monitor Apache Servers.lnk = D:\bin\ApacheMonitor.exe
O4 - Global Startup: MozyHome Status.lnk = C:\Program Files\MozyHome\mozystat.ex
O4 - Global Startup: ScanSnap Manager.lnk = ?
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\Active
O8 - Extra context menu item: Append to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\Active
O8 - Extra context menu item: Convert Link Target to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\Active
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\Active
O8 - Extra context menu item: Customize Menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustom
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2
O8 - Extra context menu item: Fill Forms - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillFo
O8 - Extra context menu item: RoboForm Toolbar - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowTo
O8 - Extra context menu item: Save Forms - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePa
O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C
O9 - Extra 'Tools' menuitem: Fill Forms - {320AF880-6646-11D3-ABEE-C
O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C
O9 - Extra 'Tools' menuitem: Save Forms - {320AF880-6646-11D3-ABEE-C
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-0
O9 - Extra 'Tools' menuitem: RoboForm Toolbar - {724d43aa-0d85-11d4-9908-0
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-0
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-0
O16 - DPF: {1E54D648-B804-468d-BC78-4
O16 - DPF: {E2883E8F-472F-4FB0-9522-A
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-F
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrss
O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueC
O23 - Service: Adobe Version Cue CS4 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueC
O23 - Service: Apache2 - Apache Software Foundation - D:\bin\httpd.exe
O23 - Service: Apache2.2 - Apache Software Foundation - D:\apache\bin\httpd.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDev
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwd
O23 - Service: AVG8 Firewall (avgfws8) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgfw
O23 - Service: AVGIDSAgent - AVG - C:\Program Files\AVG\AVG8\IdentityPro
O23 - Service: AVGIDSWatcher - AVG - C:\Program Files\AVG\AVG8\IdentityPro
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponde
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingServ
O23 - Service: GoToMyPC - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToMyPC\g2sv
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\Google
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.ex
O23 - Service: MozyHome Backup Service (mozybackup) - Mozy, Inc. - C:\Program Files\MozyHome\mozybackup.
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc3
O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe
O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exe
O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLi
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWa
O23 - Service: Trend Micro RUBotted Service (RUBotted) - Trend Micro Inc. - C:\Program Files\Trend Micro\RUBotted\TMRUBotted.
O23 - Service: ShadowProtect Service (ShadowProtectSvc) - StorageCraft Technology Corporation - C:\Program Files\StorageCraft\ShadowP
O23 - Service: StorageCraft Shadow Copy Provider (VSNAPVSS) - StorageCraft Technology Corporation - C:\WINDOWS\system32\vsnapv
--
End of file - 15489 bytes
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Sarangk 14:
Forgive me, bad memory. I also updated the NVIDIA display driver.
The repair replaced hundreds of files. SFC stopped part way through but completed on the second go.
Apache is still not operational. I like to have a localhost running for website work and hope to get it back up soon.
Other than Apache, you see nothing else that could generate further trouble, right?
Well, httpd can possibly a malware.
But other than that, I don't see anything (other experts might be more helpful in this regard)
I'll anyway sugest the following:
- Monitor the CPU utilization and the memory utilization of processes
- Scan your system using an online malware scanner
Hope this helps.
Warm regards,
Sarang
AVG and Malware come up clean. I would have assumed it was a driver issue but for all of the files missing or changed.
I had to uninstall reinstall rhapsody. System event view showed: The MCSTRM service failed to start due to the following error: The system cannot find the file specified.
This has reoccurred so I will have to uninstall reinstall again I presume.
Does this indicate anything to you.
Thank you so much for your comments so far.
-- Bill
Download UBCD. You can run memory + hard drive diagnostics using this
http://www.ultimatebootcd.
Also run dxdiag to test the graphics card
http://support.microsoft.c
If all passess try switching the keyboard with a known working keyboard and test to see if pc freezes
i just want to confirm that this is A desktop PC not a Laptop...?
If its a laptop its because of the windows Power managment system... when the battery gets to a certain level the OS cuts off the power to the keyboard and mouse... theres no way to stop it really unless you buy a new battery or keep it plugged into the mains...
if not then it could still be the Windows Power managment try disabling it...
MozyHome Remote Backup has had problems running from the outset. It still is failing. I would really like to get it going. I use ShadowProtect to another internal drive but want the offsite protection.
It tends to hang probalby because of whatever causes the keyboard and mouse to stop working.
Driver?
did you try disabling the Windows Power managment? if you have installed windows again it may be a power managment setting in your bios? what motherboard are you using? i know that some asus motherboards have power managment software which can disable USB etc. if you've got the option to use a PS2 keyboard and mouse give that a try you might find that they continue to work whereas the usb ones won't...
It may be possible some remenants of malware/viruses are still present after hardware tests seem ok.
A few options if you like:
Malwarebytes http://www.malwarebytes.or
Superantispyware http://www.superantispywar
Combofix http://www.bleepingcompute
Nod32 online scan http://www.eset.com/online
Kaspersky live cd http://devbuilds.kaspersky
Started SuperAntiSpyware scan and walked away.
On return, keyboard and mouse did not respond, there was no report on the screen so it didn't finish I assume and the disk drive light was off.
Powered off and on.
This is the second time in a row that F8 would not interrupt windows startup so I could go into safe mode.
Observing task manager after startup when response stopped I saw that it too had stopped although the disk drive remained solidly lit. Then the PC started working again.
Restarting SuperAnti...
optoma:
It froze again.
DriverCure download stopped at 26:09; AntiSpyware stopped at 25:07.
Alt-Tab shows little action box but doesn't work. Keyboard otherwise inoperative. Mouse moved but nothing else. Disk drive inactive.
AVG Firewall was off.
Processes 79; CPU Usage 39%; Commit Charge 971M/5211M
Power UP F8 worked; chose Safe Mode with Networking; Log on as Administrator.
If possible, in this state, I will try Kaspersky live cd. Otherwise, will try under regular log on.
Returned again to a frozen PC.
Keyboard: only responded to ALT-TAB. It just displayed the choices and froze.
Mouse: would only move the cursor.
Installed all out of date drivers using Pareto product.
Noted possible flakyness in Belkin USB hub that the keyboard and mouse were connected to. Plugged keyboard and mouse directly into computer.
Awaiting further freezes.
Just checked the PC and found the KB and Mouse useless and the hard drive light off.
Powered off and back on and here I am again.
There must be a troubleshooting methodology. I feel like a blind man throwing darts, in the dark!
I am going to see if I can get the ISO disk, Kaspersky live cd, to work. I must have to burn it a certain way.
cdburnerxp burns isos also http://cdburnerxp.se/
With troubleshooting a possible hardware problem like this, just have you machine connected with the mininum parts needed:keyboard,mouse,moni
Have keyboard+mouse directly connected to pc(no usb hubs)
See what happens:)
This link may help you in troubleshooting steps http://www.howtofixcompute
Thank you, optoma:
Checked out the troubleshooting link and bookmarked it. Good reference. I also provide free repair services to elderly and out-of-work people.
ISO creation successful. After 30 minutes Kaspersky live CD still read 1% complete scanning only the first drive so I will run it tonight.
All drivers are up to date now.
Most recent software installations were GoToMyPC and MozyHome Online Backup. I may remove one of them after the next freeze.
Networking still doesn't work. Hmmm.
KB & M are connected directly.
Just home, awaiting next freeze if it is going to happen.
Next, need to check disks and memory I presume.
Meanwhile, catching up on photography and website work.
-- Bill
optoma:
Didn't run Kaspersky last night fater all.
Has frozen three more times. If I can get some predictability to the freezes I can start leaving some things not running with msconfig.. It doesn't seem to matter what is running on the desktop. I walk away for an hour or two and return to a frozen machine most of the time. Other times it happens right after start-up.
Ran SFC to restore missing files.
Event log uneventful so far today despite freezes.
Updated system information in my profile on EE.
I have actually been able to get some work done.
Optoma:
Putting in new floors today. Network down during that time.
Ran chkdsk again this morning. Volume clean.
Looked for my memory test software, haven't run yet.
Kaspersky tonight.
Multiple freezes today. Made getting anything done pretty difficult. Also, PC runs very very slowly at times. Very frustrating.
The problems below have reoccurred today after having been repaired yesterday:
System Events:
SSPORT, MCSTRM, DigVecp failed to start. Could not find file specified.
Files are disappearing once again.
Redbook: The drive has not been shown to support digital audio playback.
ff 00 04 00 01 00 5c 00
00 00 00 00 09 00 ff 4f
Which drive?
Driver Update Program reports that the Audio Drive is again out of date or bad. That lines up with the Redbook event information. Tried to update the driver again and the process hung.
Starting to see a pattern here?
have you tired a different hard drive or RAM as you need to rule out that the idea that the hard drive could have bad physical sectors which once data gets written to that area of the drive the PC freezes also you might have some dodgy RAM in the machine...
if your getting errros when trying to run a Live CD like kaspersky that points towards a hardware issue.
what is your hardware setup? i.e make / models of hardrive, RAM, motherboard, processor.
do you have any temperature monitors...?
To work out if its freezing rather than if your input devices are not responding try playing an audio file constantly then check the machine and if its still playing but your KB/M are not working you'll know its the input devices.
Mbrincat:
Disk checked out with CHKDSK
Memory test ran several hours without error.
Kaspersky running, no errors, at 30%.
I put the hardware setup into my profile here but I can't seem to figure out how you could see it. I am working from a different computer right now so I can't pull that information up until later today.
I have checked the temperatures immediately after a freeze by looking at BIOS and they were OK as were voltages.
Playing an audio file should cause disk activity. When it freezes, there is no disk drive activity based on looking at the light that flashes when there is activity.
I hope this addresses the issues you have brought up.
I will see what I can do to make the system information more available.
-- Bill
Kaspersky has been working all night on boot sectors and drive 1. It is at 38% now.
It has only picked up four viruses and four trojans all in e-mail archives from 2006.
Memory test had no exceptions.
Just wondering if I could work around this problem by making drive 2 of 3 primary and install the operating system on it.
It would probably be better to figure this out.
Could you run combofix. Read through the overview firstly and follow its instructions. Whens its completed attach its logfile here.
http://www.bleepingcompute
Unable to run ComboFix.
First try:
Screen goes blank; flashes. Windows Task Manager shows a number of n.pif processes left behind and others.
Second try:
Used msconfig to change start-up loading to none.
Got disclaimer screen, nothing further.
Maybe should wait to see if freezes continue to happen.
And, try to complete an SP3 installation.
Hi optoma:
Thank you for checking back in with me.
Upon returning I installed SP3. The PC continued to run, albeit slowly, without freeze-ups.
There is still a problem with non-working sound.
To address the speed issue I opened msconfig and turned off all start-up items. I am adding back a few at a time after first seeking information about each on on the Internet and , on some, making sure the file on the PC is the right size and in the right place.
The sound doesnt' work and needs a driver. I am not sure which one. It is identified as Realtek High Definition Audio but this is probalby NVIDIA High Definition Audio. I did have a driver service running but it isn't now and I have to figure that out or reinstall it.
-- humbill
Your welcome.
Download SIW http://www.gtopala.com/siw
Run it and there is loads a sections within it but go to motherboard section and it should tell you the exact name and model of the board.
Once you know this go to the motherboards website and you should get the correct audio drivers there.
In hijackthis remove:
O24 - Desktop Component 0: (no name) - (no file)
Registry entry:
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Softwar
"Source"=""
"SubscribedURL"=""
"FriendlyName"=""
"Flags"=dword:00000000
"Position"=hex:2c,00,00,00
03,00,00,00,00,00,00,00,00
"CurrentState"=dword:00000
"OriginalStateInfo"=hex:18
ff,ff,01,00,00,00
"RestoredStateInfo"=hex:18
00,00,01,00,00,00
Safe to delete it?
Registry entry:
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Softwar
"Source"=""
"SubscribedURL"=""
"FriendlyName"=""
"Flags"=dword:00000000
"Position"=hex:2c,00,00,00
03,00,00,00,00,00,00,00,00
"CurrentState"=dword:00000
"OriginalStateInfo"=hex:18
ff,ff,01,00,00,00
"RestoredStateInfo"=hex:18
00,00,01,00,00,00
Safe to delete it?
Run combofix if you already havn't ran it. Follow its tutorial firstly
http://www.bleepingcompute
http://www.bleepingcompute
It says how to stop AVG from running.
Combofix's log is usually located at :
C\Combofix.txt
It says:
AVG 8.5
Please open the AVG 8.5 Control Center, by right clicking on the AVG icon on task bar.
* Click on Open AVG Interface.
* Double click on Resident Shield
* Deselect the option to "Enable Resident Shield."
* Save changes, and exit the application.
* To re-enable AVG 8.5, please select "Enable Resident Shield" again.
This is what I did but AVG Antivirus continued to run. Maybe msconfig is the way to kill it.
I have posted a separate question regarding the Combofix Log.
See: http://www.experts-exchang
Business Accounts
Answer for Membership
by: sarangk_14Posted on 2009-09-13 at 10:46:05ID: 25321139
Hi,
Let me understand this correctly.
You are saying that the Keyboard and the mouse used to stop responding after some time/ use, right?
If the KB and Mouse stop responding, are you sure that it's not the system that's hanging?
is Apache service a critical component?
Is httpd a critical component?
If the above two are not critical, I'll suggest you stop them if not uninstall.
Hope this helps.
Warm regards,
Sarang