Computer Troubleshooting Thread

[Krul]

Here's the log:

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 6:45:19 AM, on 13/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\vVX1000.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\McAfee.com\VSO\mcvsshld.exe
C:\Program Files\McAfee.com\VSO\oasclnt.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Telstra\Toolbar\bpumTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\WINDOWS\system32\SSL.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Ryan\Random Stuff\Installers\HiJackThis_v2.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
O2 - BHO: ActivateBand Class - {4C7B6DE1-99A4-4CF1-8B44-68889900E1D0} - C:\Program Files\Telstra\Toolbar\bpumToolBand.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\en-au\msntb.dll
O3 - Toolbar: BigPond Toolbar - {7A431EC4-CC21-4DF7-9DB1-A2CF74C4CC98} - C:\Program Files\Telstra\Toolbar\bpumToolBand.dll
O3 - Toolbar: ninemsn - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\en-au\msntb.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: (no name) - {113D26E3-F212-4919-9AA1-0DFD38EC8B1A} - (no file)
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
O4 - HKLM\..\Run: [VTPreset] VTPreset.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [BigPond Toolbar] "C:\Program Files\Telstra\Toolbar\bpumTray.exe"
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\\NeroCheck.exe
O4 - HKLM\..\Run: [MSI Installer] C:\WINDOWS\system32\SSL.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SP2 Connection Patcher] "C:\Program Files\SP2 Connection Patcher\SP2ConnPatcher.exe" -n=200
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Program Files\MP3 Player Utilities 3.70\AMVConverter\grab.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 3.70\MediaManager\grab.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: SmogonDex - {4EBDC6E1-4B3C-11D7-BC75-008048C7A589} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: SmogonDex - {4EBDC6E1-4B3C-11D7-BC75-008048C7A589} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/mcinsctl/en-au/4,0,0,90/mcinsctl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://krulwarrior.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab2.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1155107654640
O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} - https://www.gamespyid.com/alaunch.cab
O16 - DPF: {88D758A3-D33B-45FD-91E3-67749B4057FA} (Sinstaller Class) - http://dm.screensavers.com/dm/installers/si/1/sinstaller.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/mcgdmgr/en-au/1,0,0,23/mcgdmgr.cab
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = qld.bigpond.net.au
O17 - HKLM\System\CS1\Services\VxD\MSTCP: SearchList = qld.bigpond.net.au
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = qld.bigpond.net.au
O17 - HKLM\System\CS2\Services\VxD\MSTCP: SearchList = qld.bigpond.net.au
O17 - HKLM\System\CCS\Services\VxD\MSTCP: SearchList = qld.bigpond.net.au
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = qld.bigpond.net.au
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD File System Service (InCDsrv) - Unknown owner - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: O&O Defrag 2000 (OOD2000) - O&O Software GmbH - C:\WINDOWS\system32\OOD2000.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
--
End of file - 10103 bytes

 

[Reflect Suicune]

Something else weird just happened to me...this morning I went to turn on the computer, and the light just flashed yellow repeatedly, and it would not turn on... then I shook the computer and the light immediately turned green and the computer booted up like normal

 

[Faltzer]

In your system settings, you can stop it from randomly restarting on system errors.

 

[Wiz]

@Krul:

Check and fix the following lines:

O2 - BHO: ActivateBand Class - {4C7B6DE1-99A4-4CF1-8B44-68889900E1D0} - C:\Program Files\Telstra\Toolbar\bpumToolBand.dll
O3 - Toolbar: BigPond Toolbar - {7A431EC4-CC21-4DF7-9DB1-A2CF74C4CC98} - C:\Program Files\Telstra\Toolbar\bpumToolBand.dll
O3 - Toolbar: (no name) - {113D26E3-F212-4919-9AA1-0DFD38EC8B1A} - (no file)
O4 - HKLM\..\Run: [BigPond Toolbar] "C:\Program Files\Telstra\Toolbar\bpumTray.exe"
O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} - https://www.gamespyid.com/alaunch.cab
O16 - DPF: {88D758A3-D33B-45FD-91E3-67749B4057FA} (Sinstaller Class) - http://dm.screensavers.com/dm/instal...sinstaller.cab

If the problem persists, try scanning your system with Spybot.

 

[Brawley]

I have had this problem with my laptop for forever and I can only run it in safe mode so here it is: c00021a (fatal system error) The windows process sustem terminated unexpectedly with a status of 0x00000402 (0x00000000 0x00000000) The system has shut down.
Help!!!! Also I really don't know much about computers. ;/
Edit: I tried to clean the c drive and now I can't run it in safe mode because ir says system error when trying to update a password, thin return status indicates that the value provided as the current password is not correct.

 

[mirza]

Can someone please help me out. :(( I've never been so frustrated with my computer....

I've had this labtop a few months now, with the same internet and the only changes I've made to it was installing some games and recently, Winamp. It's an internet radio/satalite music player. Anyways, since this morning, every vid I've tried to watch over youtube/google has been lagging like hell and I don't know what to do. I deleted every game I installed on my labtop and uninstalled Winamp. But the icon on my desktop says it can't be deleted even though I supposidly uninstalled it.

I'm thinking there's a virus or something on my cpu but every scan I did said that there are no threats. Is there anything I could do to solve this?

 

[hybrid]

@mirza
Everybody knows what Winamp is. You don't need to explain it. Onto the actual help.

Have you rebooted after you deleted the icon? Did you refresh the screen? Also it's not your CPU that is lagging websites; chances are you are capped.

 

[Shigeru]

Okay. This is the second time this happened to me. The first time, I had to get a "professional" fix it. I'm running Windows XP.

When turning on the computer, it gets to the Windows load screen, then resets. I've tried Safe Mode, Last Working Configuration, and running it normally, but none of them gets past this.

I know that this is a virus and I used AVG on that computer, but it somehow got past it. I haven't downloaded anything recently (any that I can remember anyways).

Help please?

 

[ryubahamut]

you did not mention the point at which the computer resets.

however, try this for a start. start the computer in safe mode and install avast. avast is a better antivirus compared to AVG. the installation will schedule a bootup virus scan. if there is any virus, it will be removed this way, and the computer should return to working normally.

all the same, in the settings dialog for startup and recovery under the advanced tab of the system properties dialog box, uncheck the checkbox reading automatically restart. if the problem is due to a stop error, it will be highlighted on the next bootup.

 

[Shigeru]

Okay. This is the second time this happened to me. The first time, I had to get a "professional" fix it. I'm running Windows XP.

When turning on the computer, it gets to the Windows load screen, then resets. I've tried Safe Mode, Last Working Configuration, and running it normally, but none of them gets past this.

I know that this is a virus and I used AVG on that computer, but it somehow got past it. I haven't downloaded anything recently (any that I can remember anyways).

Help please?

 

[.astrokid]

I have a friend whose laptop is having startup problems. When switched on it goes into a screen with several options, safe mode, start windows normally, start with last configurations etc whichever he clicks on the windows loading screen then comes up but the computer then reboots after a while just after a blue screen with white text is displayed, but only for like half a second so its unreadable. Any ideas?

 

[timw06]

Try pressing the Pause|Break key on your keyboard as the text appears - it should freeze it - and then post it here.

Whether that works or not he will probably need to reinstall Windows - most likely cause of this problem is a corrupt kernel. Get a linux live cd with NFTS3G, use it to back up all your files then wipe the hard drive and start again.

 

[FDS]

The volume won't work on my computer for some reason. It was working a few months ago. The speakers are plugged in and set up correctly and it doesn't come through headphones either. I checked the control panel and the volume isn't muted, rather it's turned up plenty high. It's not a real problem just annoying.

 

[Chill Murray]

Not sure if this is the right thread for this, but it seems like it. I have an IRC question.

Starting yesterday I started getting the message

[00:37:19] Closing Link: WER[*stuff*] (Z:lined (You look like a bot. Be sure to fill in your nick/ident/realname properly.))

whenever I try to connect to the server. How do I fix this?

 

[Yoko Rains]

Well, it'd be great if someone can tell me why Shoddy has always been freezing on me.

I'd click Ice Beam, for example, and then Use. Instead of my timer stopping to tick, and my opponents starting to tick, mines stays ticking, and no damage pops up on my screen. To make sure that its not just a quick glitch, but that I froze, I type stuff into the chat-box, and yet again nothing happens. This has happened to me in every battle I have participated in.

 

[Faltzer]

I'm not sure if this is 100% accurate, though you may not have enough system resources, if there even are requirements for Shoddy running on 100% performan ce.

 

[Yoko Rains]

Ah man...I'm not worried about Hard-drive space, I have loads of that.

But 256 RAM just might not be enough?

 

[Doomsday]

Lately whenever I open the task manager I notice that I have loads of weird exes flying around. I have tried to scan my computer with avast and ad-aware, though I still haven't got rid of them! here's a screenshot:

I have no idea what to do now, all I know is that those little shits keep hogging my ram.

 

[ryubahamut]

The NM....exe files come with Nero, they're okay, don't worry about them.
Brmfcwnd.exe comes with some printer driver, so that's okay too.
And this says that Viewpointservice.exe comes from something by the name of Viewpoint Manager, though I don't know what that is.

There should not be any problem if the associated programs are installed on your computer, Doomsday. But if they're not, then they might be some spyware, or a remnant of a previous uninstallation. Please clarify if these apps are installed.

 

[Doomsday]

oh. I thought they were virus or some spyware. Yeah most of that stuff comes from what I've installed recently. Thanks, im dumb.

 

[Konrad]

http://i33.photobucket.com/albums/d68/KLSmash/ScreenShot058.jpg
http://i33.photobucket.com/albums/d68/KLSmash/ScreenShot059.jpg

The Dealio Toolbar on my Add/Remove Programs but nowhere else. I click Uninstall. The uninstaller starts up, but just dies half-way and disappears, and Dealio remains. Any way to remove it? I just don't like having my Add/Remove Programs list not clean.

 

[Raikage]

Recently my computer seems to shut down automatically (as in, monitor blanks out and CPU dies, rather than the normal way) whenever I run certain applications (Warcraft, Visualboy), and it won't be useable until about 30 minutes later.

I've been told that this is due to lack of RAM. I don't really know much about computers so I'd like to confirm if this is true, and if it is, how I can fix it. Thanks in advance

 

[pokedude7]

Have any of y'all try doing mantaince on your computer (clean up the Hard Drive, Scan for errors, Defragment the Drive)? You can also use the Clean Up utility to remove the programs that you don't use.

 

[CardsOfTheHeart]

I think I may have killed my laptop's ability to boot...

To avoid going into a really long story, I'll just say that I unplugged my notebook and turned it off while Windows Vista was updating. (I was in a rush to school and accidentally clicked on the button to update and shut down. I panicked and shut it down myself.)

The computer hasn't been able to successfully boot since then (can't get to the login screen). I've gotten into my setup utility and went to perform a primary hard disk self test, but the test isn't done just yet and I'm having doubts that it will help me fix anything.

If there's anyone that knows just what the heck I'm talking about, help!

(Short version: I need to know exactly what happens when the computer shuts down as it is updating and how I can fix it.)

EDIT: I wasn't expecting a reply to this question this quickly, but now that I think about it, I should give you more details of the problem.

You see, the way I have my updates set on Vista (the default, as far as I know), whenever updates are available, the Start Menu gives you an option to install the updates and shut down the computer. (The icon is easily recognizable.) Anyway, when you click on that, you eventually go to a screen that says it is updating. It also tells you NOT to unplug the machine or turn it off while it is updating.

Well, I accidentally had it update and shut down, and since I was in a rush and had to be somewhere, I unplugged it while it was updating AND turned it off. Now, I can't get back into Windows. I've tried all that I can do to recover, but nothing works.

(Man, I wish I was able to backup my data...)


EDIT2: Okay, after getting a few outside opinions, I believe I'm going to have to reinstall Windows in order to fix the problem. I'll end up losing all of my data, as far as I know, but it's the only thing I know to do. (Even so, I've got something that just might be able to recover the lost data, though there may be a compatibility issue.) I'll let you know if it works so that others might be able to fix similar problems in a similar manner.

 

[Gao]

In the future, create a smaller (20GB? or so) partition for your operating system & applications.

That way when your OS screws up you can reformat without losing your data.