View Full Version : Computer keeps crashing, what to do???
Who_Knows
04-05-2004, 01:05 PM
I'm having a lot of trouble lately with my computer. It is always either restarting on its own or crashing all the time and I can't seem to find the problem. Before it restarts or crashes, the motor will sound very low (as if it was going to crash)and then rise again, it does this numberous of times before it stalls and then crashes. I'm not sure it could be a virus because I've done a lot of Norton virus scannings day and night but it says everything's normal. I've also kept the inside of the PC clean..meaning fans..etc. It is a Pentium 3 (1 GIG) and I'm not sure what the RAM is, how do I find this out?? The computer is one of the newer kinds and only about 3 years old and still brand new so I don't get why this is happening, it is very frustrating. Can anyone help me out here???
Many thanks.
jabarnutcase
04-05-2004, 02:01 PM
Hello Who_Knows....And Welcome!
Before it restarts or crashes, the motor will sound very low (as if it was going to crash)and then rise again, it does this numerous of times before it stalls and then crashes.
Which "motor" are you talking about? I assume it's one of your Fans.
If the result is a crash, it's most likely the CPU Fan or Power Supply.
You should shut your Computer down, open the case and restart.
Without actually touching anything, listen carefully and see if you can tell which Fan is slowing down.....Listen near the rear of your Power Supply too, as well as inside the case.
Temperatures could be a real problem here, especially if it's your CPU Fan.
Do you know how to check your system temperatures and voltages in Bios, or do you have a utility installed that will tell you?
As far as the amount of Ram you have, just right click on "My Computer", select "properties" and the main screen will tell you the amount of Ram you have installed.
At this point, that is unimportant until we figure out which "Motor" is slowing down just before the crash.....My guess is your CPU Fan is dying and the Processor is shutting down due to heat. (Although a bad Power Supply can certainly cause the same problem).
I am going to assume that you have stable power in your House, and the lights aren't dimming at the same time! :p :eek:
Who_Knows
04-05-2004, 02:30 PM
Thanks a lot jabarnutcase, That was very helpful information!! I will do everything that you mentioned, and I'll get back to you when I get some results and let you know :)
Thanks again!
Who_Knows
04-06-2004, 12:57 AM
Hi Again,
Well I did everything you mentioned, I checked the fans and completely took the case apart but everything seems to be working at high speed, and nothing feels hot in there. When I listened for the slowing down of the fan..I didn't notice that they were slowing down at all. They sound like they're working just fine. So I don't think that it has anything to do with the fans. But I will tell you what I think it might be:
Around the beginning of February I received an email saying that my emails have been opened. Then I started getting emails from a person that said that they were watching me and each time I made a new email..they knew it. I figure they got my email from a site I've been to. Therefore I think that someone has hacked into my computer for whatever reason! The other day Norton SystemWorks had 2 updates for me to install which I did, but it came back and said that Norton AntiVirus files were corrupted and was unable to install the update. I think a virus has been put onto this computer that has corrupted those files and many other files that are just in my name which I share this computer with 2 other people, so all of the files that are corrupted are just in my name and not the other 2 peoples that share this computer, doesn't that sound a little bit strange?
The computer can't be heating up because it only starts acting up once in a while and I notice that MemTurbo (A RAM program that I have installed) starts to go crazy when the slowing down and speeding up is happening. I think this is when the virus is going through and corrupting all the files. Today, all the files (there were so many) that were corrupted end in .gif and I don't even recognize any of the files, they don't exsit in any of my files.
I hope this makes some sense to you. I am not very computer wise. lol
Is there any way that I can block this person from doing this, and also how would I know if it is a virus? I'm pretty sure it is because that's when my computer started acting up, although it's been way worse this last month. I thought that I had everything protected by Norton, and I do regular updates and scannings but I still think that some how this person has been able to meddle with it.:rolleyes:
I could be totally wrong but I think it makes more sense than the computer heating up, what do you think?
Thanks a lot!
korky45
04-06-2004, 06:02 AM
Why don't you try these web sites:-
http://www.pandasoftware.com/activescan/com/activescan_principal.htm
http://www.trojanscan.com/
It would also help if you posted a HijackThis log so that someone can have a look for malware.
Good Luck:)
Who_Knows
04-06-2004, 02:12 PM
Thanks very much for the links korky45, I'll definately run a trojan scan. :)
It would also help if you posted a HijackThis log so that someone can have a look for malware.
Also how do I post a HiJackThis Log, and what does this mean? And what is malware? I'm totally new to all this..
Thanks again for all help!!
david eaton
04-06-2004, 02:32 PM
To post a log from Hijack this, Please download Hijack this (http://www.spywareinfo.com/downloads/tools/HijackThis.exe)
Copy it into its own folder, doubleclick HijackThis.exe, and hit "Scan".
When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, save the log, do Ctrl-A to Select All, and copy its contents here. Most of what it lists will be harmless or even essential, don't fix anything yet.
Who_Knows
04-06-2004, 03:16 PM
Hi, Thanks David! I did what you said, and here goes..
Logfile of HijackThis v1.97.7
Scan saved at 1:06:17 PM, on 06/04/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\crypserv.exe
C:\PROGRA~1\NORTON~3\NORTON~4\GHOSTS~2.EXE
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\PROGRA~1\NORTON~3\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\Mixer.exe
C:\Program Files\Winamp\Winampa.exe
C:\PROGRA~1\Save\Save.exe
C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe
C:\PROGRA~1\COMMON~1\ADAPTE~1\CreateCD\CREATE~1.EX E
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\WEATHE~1\Weather.exe
C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
C:\Program Files\Silicon Prairie Software\MemTurbo\memturbo.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\SYSDOC32.EXE
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\Webshots\WebshotsTray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\INCRED~2\bin\IBMAIN.EXE
C:\Program Files\Real\RealDownload\Realdownload.exe
C:\My Download Files\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = C:\Program Files\Copernic Agent\Web\SearchBar.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://my.ca.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\blank.htm
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {12BA043E-293E-4CE4-A8C7-8460934FE801} - C:\Program Files\IncrediBar\bin\IBBHO.dll
O2 - BHO: (no name) - {4401FDC3-7996-4774-8D2B-C1AE9CD6CC25} - C:\PROGRA~1\E-BOOK~1\FLIPBR~1.0\FpLaunch.DLL
O2 - BHO: (no name) - {601ED020-FB6C-11D3-87D8-0050DA59922B} - C:\Program Files\WS_FTP Pro\wsbho2k0.dll
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {EBCDDA60-2A68-11D3-8A43-0060083CFB9C} - C:\WINDOWS\System32\nzdd.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\Program Files\Copernic Agent\CopernicAgentExt.dll
O3 - Toolbar: IncrediBar - {D8073790-84C7-4602-BF77-C6ACBF1612E4} - C:\Program Files\IncrediBar\bin\IBToolBar.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"
O4 - HKLM\..\Run: [WhenUSave] C:\PROGRA~1\Save\Save.exe
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe -osboot
O4 - HKLM\..\Run: [LWBMOUSE] C:\Program Files\Tech\Wheel Mouse\5.0\MOUSE32A.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [GhostStartTrayApp] C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [CreateCD50] C:\PROGRA~1\COMMON~1\ADAPTE~1\CreateCD\CREATE~1.EX E -r
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [WeatherCast] C:\PROGRA~1\WEATHE~1\Weather.exe /q
O4 - Startup: MemTurbo.lnk = C:\Program Files\Silicon Prairie Software\MemTurbo\memturbo.exe
O4 - Startup: Norton System Doctor.LNK = C:\Program Files\Norton SystemWorks\Norton Utilities\SYSDOC32.EXE
O4 - Startup: Microsoft Works Calendar Reminders.lnk = C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
O4 - Startup: Norton Disk Doctor.LNK = C:\Program Files\Norton SystemWorks\Norton Utilities\NDD32.EXE
O4 - Startup: PowerReg Scheduler.exe
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\WebshotsTray.exe
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Global Startup: RealDownload.lnk = C:\Program Files\Real\RealDownload\Realdownload.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: MemTurbo.lnk = C:\Program Files\Silicon Prairie Software\MemTurbo\memturbo.exe
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: Search Using Copernic Agent - C:\Program Files\Copernic Agent\Web\SearchExt.htm
O9 - Extra button: IncrediBar (HKLM)
O9 - Extra 'Tools' menuitem: Launch Copernic Agent (HKLM)
O9 - Extra button: Copernic Agent (HKLM)
O9 - Extra button: AOL Instant Messenger (TM) (HKLM)
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: Yahoo! Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O16 - DPF: Yahoo! Pool 2 - [url]http://download.games.yahoo.com/games/clients/y/pos5_x.cab[/url]
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - [url]http://www.apple.com/qtactivex/qtplugin.cab[/url]
O16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - [url]http://www.trojanscan.com/trojanscan/TDECntrl.CAB[/url]
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - [url]http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab[/url]
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - [url]http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab[/url]
O16 - DPF: {C3DFA998-A486-11D4-AA25-00C04F72DAEB} (MSN Photo Upload Tool) - [url]http://sc.communities.msn.com/controls/PhotoUC/MsnPUpld.cab[/url]
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - [url]http://active.macromedia.com/flash2/cabs/swflash.cab[/url]
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IMDownloader Class) - [url]http://www2.incredimail.com/contents/setup/downloader/imloader.cab[/url]
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - [url]http://sc.communities.msn.com/controls/chat/msnchat45.cab[/url]
I hope that this will help because it makes no sense to me:confused:
Oh I tried the Trojan scan but the computer restarted on me so I couldn't finish. Hopefully this helps!! Thanks again
Who_Knows
04-06-2004, 03:25 PM
Oh, I just realized that the files sent above from HijackThis is from the administrators log in portion of the computer, not from mine (where all the files are being corrupted) does that make a difference?
Budfred
04-06-2004, 11:56 PM
These are the only things that clearly need to be fixed in this log. Please close all open windows and your browser and then use it to fix:
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\blank.htm
O4 - HKLM\..\Run: [WhenUSave] C:\PROGRA~1\Save\Save.exe
I recommend fixing these as well because they are registration reminders that are thought to be spyware by some people. They are not needed:
O4 - Startup: PowerReg Scheduler.exe
O4 - Startup: PowerReg Scheduler V3.exe
And you need to run the scan on the User profile that is having problems... After that, post that log and we can check it out... You also badly need to update you WinXP or you are wide open to all sorts of attacks....
Also, you are using Incredimail and I have seen a couple of people having trouble with it recently. We can try other things first, but may need to look at it if we can sort this out. Apparently IncrediBar is still beta and has some problems...
jabarnutcase
04-07-2004, 10:10 AM
Wow!, this thread sure has changed a lot since I first heard:
"Before it restarts or crashes, the motor will sound very low (as if it was going to crash)and then rise again, it does this numberous of times before it stalls and then crashes".
And:I've done a lot of Norton virus scannings day and night but it says everything's normal.
and then:I checked the fans and completely took the case apart but everything seems to be working at high speed, and nothing feels hot in there. When I listened for the slowing down of the fan..I didn't notice that they were slowing down at all. :confused: :p
For future reference, it sure would Have been helpful had you mentioned the MemTurbo, email incidents, Norton Systemworks thing, viruses, corrupted files, etc. to begin with.
"Who_Knows"? ;)
Who_Knows
04-07-2004, 04:38 PM
Budfred - Hi, Thanks for your help, I'll fix those items you mentioned.
I recommend fixing these as well because they are registration reminders that are thought to be spyware by some people. They are not needed:
Why doesn't Ad-aware detect these spywares? I do a scan every Sunday.
jabarnutcase -For future reference, it sure would Have been helpful had you mentioned the MemTurbo, email incidents, Norton Systemworks thing, viruses, corrupted files, etc. to begin with.
Oops:p Sorry, I didn't think of it when I made my first post. After I did what you said and realized that things seemed to be okay there, only then it hit me that it could be this virus problem.
Who_Knows
04-07-2004, 05:13 PM
Budfred - Okay, Here is the copied files from my account on the computer that you asked for:
Logfile of HijackThis v1.97.7
Scan saved at 2:51:58 PM, on 07/04/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\crypserv.exe
C:\PROGRA~1\NORTON~3\NORTON~4\GHOSTS~2.EXE
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\PROGRA~1\NORTON~3\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\Mixer.exe
C:\Program Files\Winamp\Winampa.exe
C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe
C:\Program Files\Tech\Wheel Mouse\5.0\MOUSE32A.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe
C:\PROGRA~1\COMMON~1\ADAPTE~1\CreateCD\CREATE~1.EX E
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
C:\Program Files\Silicon Prairie Software\MemTurbo\memturbo.exe
C:\PROGRA~1\YAHOO!\MESSEN~1\ymsgr_tray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\INCRED~2\bin\IBMAIN.EXE
C:\Documents and Settings\Elysia.Z5L4Q7\Local Settings\Temporary Internet Files\Content.IE5\DR4T9H89\HijackThis[1].exe
C:\Program Files\Messenger\msmsgs.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = C:\Program Files\Copernic Agent\Web\SearchBar.htm
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {12BA043E-293E-4CE4-A8C7-8460934FE801} - C:\Program Files\IncrediBar\bin\IBBHO.dll
O2 - BHO: (no name) - {4401FDC3-7996-4774-8D2B-C1AE9CD6CC25} - C:\PROGRA~1\E-BOOK~1\FLIPBR~1.0\FpLaunch.DLL
O2 - BHO: (no name) - {601ED020-FB6C-11D3-87D8-0050DA59922B} - C:\Program Files\WS_FTP Pro\wsbho2k0.dll
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {EBCDDA60-2A68-11D3-8A43-0060083CFB9C} - C:\WINDOWS\System32\nzdd.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\Program Files\Copernic Agent\CopernicAgentExt.dll
O3 - Toolbar: IncrediBar - {D8073790-84C7-4602-BF77-C6ACBF1612E4} - C:\Program Files\IncrediBar\bin\IBToolBar.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe -osboot
O4 - HKLM\..\Run: [LWBMOUSE] C:\Program Files\Tech\Wheel Mouse\5.0\MOUSE32A.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [GhostStartTrayApp] C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [CreateCD50] C:\PROGRA~1\COMMON~1\ADAPTE~1\CreateCD\CREATE~1.EX E -r
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] C:\PROGRA~1\YAHOO!\MESSEN~1\ypager.exe -quiet
O4 - Startup: MemTurbo.lnk = C:\Program Files\Silicon Prairie Software\MemTurbo\memturbo.exe
O4 - Global Startup: RealDownload.lnk = C:\Program Files\Real\RealDownload\Realdownload.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: MemTurbo.lnk = C:\Program Files\Silicon Prairie Software\MemTurbo\memturbo.exe
O8 - Extra context menu item: Search Using Copernic Agent - C:\Program Files\Copernic Agent\Web\SearchExt.htm
O9 - Extra button: IncrediBar (HKLM)
O9 - Extra 'Tools' menuitem: Launch Copernic Agent (HKLM)
O9 - Extra button: Copernic Agent (HKLM)
O9 - Extra button: AOL Instant Messenger (TM) (HKLM)
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: Yahoo! Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O16 - DPF: Yahoo! Pool 2 - [url]http://download.games.yahoo.com/games/clients/y/pos5_x.cab[/url]
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - [url]http://www.apple.com/qtactivex/qtplugin.cab[/url]
O16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - [url]http://www.trojanscan.com/trojanscan/TDECntrl.CAB[/url]
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - [url]http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab[/url]
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - [url]http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab[/url]
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - [url]http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38083.8842824074[/url]
O16 - DPF: {C3DFA998-A486-11D4-AA25-00C04F72DAEB} (MSN Photo Upload Tool) - [url]http://sc.communities.msn.com/controls/PhotoUC/MsnPUpld.cab[/url]
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - [url]http://active.macromedia.com/flash2/cabs/swflash.cab[/url]
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IMDownloader Class) - [url]http://www2.incredimail.com/contents/setup/downloader/imloader.cab[/url]
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - [url]http://sc.communities.msn.com/controls/chat/msnchat45.cab[/url]
I'll be waiting for your suggestions;)
Budfred
04-08-2004, 12:27 AM
This one looks okay... You still need to update WinXP and it would be good to post a fresh log from the Admin account after you do that. Also, how are things working??
Who_Knows
04-08-2004, 11:50 PM
Wow..it took me quite a while to post back, my computers been crashing all day!
But I want to thank everyone very much for helping me with this, I really do appreciate your time!!:)
Here's an update: The computer seems worse than before. The fan sounds are still the same, but happening more frequently. When the fan sounds slows down, there is a click before it goes up to normal speed again. I noticed that It just started happening, and it sounds like it's coming from the CD player but it's really hard to tell. The computer was resetting itself most of the time before, but now it totally shuts down. When this happens there's no warning whatsoever. This is happening a lot now. The only way it will turn on again is if I let it sit for 1/2 an hour and then turn the power bar off..and then on again.
Budfred- There is no way that I can do a windows update because the computer always crashes. Same with the Trojan scan that I tried to do. I've been working with it all last night but there's no way that it will let me do any scans/updates, only the odd Norton scan. Although I have seen no corrupted files so far since going through the "HiJackThis" procedure yesterday, so I'm very happy about that!!
I called a technician this morning, one whose done service for me once before, and he said he really believes it's the power supply. He wants me to get that checked out immediately, so I'm praying that it is the answer but I still don't really know. Because why would I have all of those corruted files earlier, I've never gotten that before.
Anyhow, I'll definately keep everyone updated on what's happening. Again, I really appreciate your help!
jabarnutcase
04-09-2004, 08:41 AM
The fan sounds are still the same, but happening more frequently. When the fan sounds slows down, there is a click before it goes up to normal speed again.
This had been a concern of mine, as you know, from the beginning of this thread.
While there is no question that ridding your computer of Malware, Viruses, and other unnecessary junk is very important, it has sounded more like a Hardware problem to me from the beginning.
I doubted that this "motor" issue you mentioned to begin with just magically disappeared.
My guess at this point without more definite information is that maybe, (as you "Local Tech" suggested), you should give another Power Supply a try.
vBulletin v3.6.1, Copyright ©2000-2012, Jelsoft Enterprises Ltd.