Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Having Problems Running Programs And Shutting Down Computer


  • Please log in to reply
3 replies to this topic

#1 taggs

taggs

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:02:52 AM

Posted 31 August 2008 - 07:56 PM

Since getting my computer about a year ago, i've had continual problems with the general running of the machine. I run Windows XP Media Center Edition. I've done a system restore on it once already to restore it to factory settings and the computer ran well for about a week. Since restoring the computer, I've had to reinstall most of my programs and I also installed a trial version of Norton Systemworks that lasted for 3 months before the trial ended. Instead of renewing the subscription, I downloaded Avast antivirus and began using it. Since my system restore however, I've been having problems getting programs to download properly (such as AdAware). It would seem to download and then when I would try to install it, it would tell me that it wasn't a valid win32 application. I've also had the same error message when attempting to download drivers for my Lexmark all in one printer and also, now since using avast, I cannot seem to download my microsoft updates.
In addition to this unusual behaviour, my computer suddenly won't shut down properly. Upon going to the start button and Shut down, the computer seems to ignore the request. The dialog box allowing you to choose to shut down or restart the computer will not open, so I have to go through the task manager to shut down. It will then take me to the blue screen, say it's saving settings and then that it is shutting down and it will freeze on the blue screen prompting me to have to shut the computer off with my power bar button. I know this isn't good for the computer, but have yet to figure out another way to do it.
I've tried running all the programs suggested before posting, and sometimes the programs run and don't find anything, and other programs won't run at all (like Adaware, Panda online virus scanner won't run, Trend housecall freezes up)
Avast sometimes pops up a message saying it's blocked a DCOM Exploit, but I'm not sure if that is part of the problem.
I really am at my wit's end as to what is wrong and how to fix it, so any possible help or suggestions on how to clean up this nightmare would really be appreciated!

BC AdBot (Login to Remove)

 


m

#2 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:02:52 AM

Posted 31 August 2008 - 09:00 PM

http://service1.symantec.com/Support/tsgen...005033108162039

run the norton's uninstaller

then let's see what's going on with your programs

Download SmitfraudFix (by S!Ri) to your Desktop.
http://siri.urz.free.fr/Fix/SmitfraudFix.exe

Double-click SmitfraudFix.exe
Select option #1 - Search by typing 1 and press Enter
This program will scan large amounts of files on your computer for known patterns so please be patient while it works. When it is done, the results of the scan will be displayed and it will create a log named rapport.txt in the root of your drive, eg: Local Disk C: or partition where your operating system is installed. Please post that log along with all others requested in your next reply.

IMPORTANT: Do NOT run any other options until you are asked to do so!


**If the tool fails to launch from the Desktop, please move SmitfraudFix.exe directly to the root of the system drive (usually C:), and launch from there.

I also need to know the make and model of your computer, cpu and installed ram

Edited by DaChew, 31 August 2008 - 09:02 PM.

Chewy

No. Try not. Do... or do not. There is no try.

#3 taggs

taggs
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:02:52 AM

Posted 01 September 2008 - 12:58 PM

Here is the Make and Model of my computer, as I said before it runs Windows XP Media Center Edition (is there a difference between that and Home or Pro?) with SP2.

Hewlett Packard
HP Pavilion
Pentium 4 CPU 2.8 GHz
960 MB of RAM
(did i miss anything?)
Norton has been uninstalled from what I can tell, and here is the log you requested.
Thanks for your quick reply!

SmitFraudFix v2.344

Scan done at 13:43:52.54, 01/09/2008
Run from C:\Documents and Settings\HP_Administrator\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode

Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\arservice.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft LifeCam\MSCamSvc.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\ARPWRMSG.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\DISC\DISCover.exe
C:\Program Files\DISC\DiscUpdateMgr.exe
C:\Program Files\Sonic\DigitalMedia Plus\DigitalMedia Archive\DMAScheduler.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\DISC\DiscGui.exe
C:\WINDOWS\vVX3000.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\Hewlett-Packard\HP Deskjet 9800 Series\Toolbox\HPWQTBX.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmon.exe
C:\WINDOWS\system32\lexpps.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Rainlendar2\Rainlendar2.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Updates from HP\9972322\Program\Updates from HP.exe
C:\Program Files\DISC\DiscStreamHub.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Trillian\trillian.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
c:\windows\system\hpsysdrv.exe
C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Documents and Settings\HP_Administrator\Desktop\SmitfraudFix\Policies.exe
C:\WINDOWS\system32\cmd.exe

hosts

hosts file corrupted !

127.0.0.1 www.legal-at-spybot.info
127.0.0.1 legal-at-spybot.info

C:\


C:\WINDOWS


C:\WINDOWS\system


C:\WINDOWS\Web


C:\WINDOWS\system32


C:\Documents and Settings\HP_Administrator


C:\Documents and Settings\HP_Administrator\Application Data


Start Menu


C:\DOCUME~1\HP_ADM~1\FAVORI~1


Desktop


C:\Program Files


Corrupted keys


Desktop Components

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"


IEDFix
!!!Attention, following keys are not inevitably infected!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



VACFix
!!!Attention, following keys are not inevitably infected!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


404Fix
!!!Attention, following keys are not inevitably infected!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


AntiXPVSTFix
!!!Attention, following keys are not inevitably infected!!!

AntiXPVSTFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


Winlogon
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
"System"=""


RK



DNS

Description: WAN (PPP/SLIP) Interface
DNS Server Search Order: 16.92.3.242
DNS Server Search Order: 16.92.3.243
DNS Server Search Order: 16.81.3.243
DNS Server Search Order: 16.118.3.243

Description: WAN (PPP/SLIP) Interface
DNS Server Search Order: 198.6.1.125
DNS Server Search Order: 198.6.100.125

HKLM\SYSTEM\CCS\Services\Tcpip\..\{12C7E64D-E6AD-4A98-ADFE-D04966F10238}: NameServer=198.6.1.125 198.6.100.125
HKLM\SYSTEM\CCS\Services\Tcpip\..\{892900FC-9814-4488-99C0-81491C1EE93D}: DhcpNameServer=16.92.3.242 16.92.3.243 16.81.3.243 16.118.3.243
HKLM\SYSTEM\CS1\Services\Tcpip\..\{892900FC-9814-4488-99C0-81491C1EE93D}: DhcpNameServer=16.92.3.242 16.92.3.243 16.81.3.243 16.118.3.243


Scanning for wininet.dll infection


End

#4 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:02:52 AM

Posted 01 September 2008 - 04:32 PM

Avast is a very good anti-malware security suite, however I found it to be very resource intensive, slowing bootup signicicantly with older computers. I spent quite a bit of time researching MCE this past day for another poster who's trying to fix his dell computer, I helped him build a custom windows xp machine and it has none of the same issues you and he have with MCE.

Most people are running the rollups for MCE and disabling parts of the media components attempting to fix this operating system.

When attempting any software repair I would unload avast and disable teatimer

Malware might be easier to fix, if you can find some
Chewy

No. Try not. Do... or do not. There is no try.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users