Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Help!


  • This topic is locked This topic is locked
25 replies to this topic

#1 booka

booka

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:12:26 AM

Posted 04 October 2004 - 03:34 PM

My Dell Inspiron 2500 laptop has been running very slowly (taking ~15 minutes to get the desktop loaded after turning on). Other programs are slow to start up too and crash often. Outlook Express is the worst b/c it will load the window but not the email and then it will be "not responding." (so it never actually opens the program)

I took it to computing services and they charged me lots of money to run AdAware and SpyBot and Norton and tell me that it was fixed (even though I'd already done all of those things...grrr...). And it seemed fixed, but alas, the next day it was back to its impertinent slow self again.

So then I ran ScanDisk, and it kept restarting and never actually finished a scan. So then I called Dell and spent a good two hours on the phone reformatting my hard drive...in such a way that I didn't lose any of my documents etc, so i guess that's just restoring Windows? So everything seemed excellent and I was really excited.

This morning it ran fine, then I closed it to put it to sleep while I went to class. Apparently this was a mistake b/c when I tried to wake it up it was back to its sluggish self again. Rebooting didn't help. :thumbsup:

Does anyone know how to fix this??? I have Windows ME if that helps.

Thank you thank you thank you...

BC AdBot (Login to Remove)

 


#2 12g

12g

  • Members
  • 450 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Scotland
  • Local time:05:26 AM

Posted 04 October 2004 - 03:59 PM

Hi,

Let's try this;

Download 'Hijack This!'. Here
Save it to a convenient permanent folder like this C:\HJT\HijackThis.exe, double click HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, save the log, Ctrl-A to Select All, and copy its contents here. Most of what it lists will be harmless or even essential, don't fix anything yet.

#3 booka

booka
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:12:26 AM

Posted 04 October 2004 - 06:05 PM

here's what I got...

Logfile of HijackThis v1.98.2
Scan saved at 7:04:37 PM, on 10/4/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0100)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\SYMANTEC_CLIENT_SECURITY\SYMANTEC ANTIVIRUS\RTVSCN95.EXE
C:\PROGRAM FILES\SYMANTEC_CLIENT_SECURITY\SYMANTEC ANTIVIRUS\DEFWATCH.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\PROGRAM FILES\SYMANTEC_CLIENT_SECURITY\SYMANTEC ANTIVIRUS\VPTRAY.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPLPR.EXE
C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPENH.EXE
C:\PROGRAM FILES\AIM\AIM.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\EXPLORER.EXE
C:\HJT\HIJACKTHIS.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://channels.aimtoday.com/search/aimtoolbar.jsp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://channels.aimtoday.com/search/aimtoolbar.jsp
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: TChkBHO Class - {FB9C4C84-29F3-42A9-862A-B94F059A4235} - C:\WINDOWS\SYSTEM\CLSIK.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: AIM Search - {40D41A8B-D79B-43d7-99A7-9EE0F344C385} - C:\PROGRAM FILES\AIM TOOLBAR\AIMBAR.DLL
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [rtvscn95] C:\PROGRA~1\SYMANT~1\SYMANT~1\rtvscn95.exe
O4 - HKLM\..\RunServices: [defwatch] C:\PROGRA~1\SYMANT~1\SYMANT~1\defwatch.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKCU\..\Run: [AIM] C:\PROGRAM FILES\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Weather] C:\PROGRAM FILES\AWS\WEATHERBUG\WEATHER.EXE 1
O8 - Extra context menu item: &Define - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O8 - Extra context menu item: Look Up in &Encyclopedia - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O8 - Extra context menu item: &AIM Search - res://C:\PROGRAM FILES\AIM TOOLBAR\AIMBAR.DLL/aimsearch.htm
O9 - Extra button: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra 'Tools' menuitem: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra button: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra 'Tools' menuitem: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: MSN Messenger Service - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRAM FILES\AIM\AIM.EXE
O9 - Extra button: Dell Home - {08DCFC6C-B6E4-480C-95A4-FC64F37B787E} - http://www.dellnet.com/ (file missing) (HKCU)
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\PROGRA~1\AWS\WEATHE~1\Weather.exe (HKCU)
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O16 - DPF: {E2CF5C45-7CCC-11D4-9BD1-0080C6F60B6A} (CouponsComBrxpdf2 Control) - http://ftp.coupons.com/brxpdf2.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.4.0_01) -
O16 - DPF: {CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA} (Java Runtime Environment 1.4.0_01) -
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/103d2ace91fc22450f21/netzip/RdxIE6.cab
O16 - DPF: {D30CA0FD-1CA0-11D4-AC78-006008A9A8BC} (WebBasedClientInstall Class) - http://nortonres1.allegheny.edu/webinst/webinst.cab
O16 - DPF: {BAC01377-73DD-4796-854D-2A8997E3D68A} (Yahoo! Photos Easy Upload Tool Class) - http://us.dl1.yimg.com/download.yahoo.com/...ropper1_3us.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061...all/xscan53.cab
O17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain = allegheny.edu
O17 - HKLM\System\CCS\Services\VxD\MSTCP: SearchList = allegheny.edu


Thanks!

#4 12g

12g

  • Members
  • 450 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Scotland
  • Local time:05:26 AM

Posted 04 October 2004 - 06:33 PM

You need to Update Windows and Internet Explorer, to get all the Latest Security Patches that Protect Your Computer.

This can be accessed by going Here and following the prompts.

Also, the timing issue discussed Here may be of some help.

Next;

Make sure all browsers and windows are closed except for hijackthis and put a check against the following and click 'fix checked';


O2 - BHO: TChkBHO Class - {FB9C4C84-29F3-42A9-862A-B94F059A4235} - C:\WINDOWS\SYSTEM\CLSIK.DLL

O4 - HKCU\..\Run: [Weather] C:\PROGRAM FILES\AWS\WEATHERBUG\WEATHER.EXE 1


O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\PROGRA~1\AWS\WEATHE~1\Weather.exe (HKCU)

O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/103d2ace91fc22450f21/netzip/RdxIE6.cab

Restart your computer in
Safe Mode Also make sure you show hidden and system files Then delete the following files or folders as indicated below if they still show:

Not all or any of these may still show,

C:\WINDOWS\SYSTEM\CLSIK.DLL
C:\PROGRAM FILES\AWS<<Folder
C:\PROGRA~1\AWS<<Folder

Reboot in Normal Mode, to see if that improves the problem.

#5 booka

booka
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:12:26 AM

Posted 05 October 2004 - 10:10 AM

What if...
when I try to update Windows and IE it finishes mostly...then it tells me that four components weren't downloaded (IE 6 + a few others related to it...I think one's called Advance Authoring...). So when I restart it says setup wasn't completed, do I want to complete it now. If I hit "Yes, resume setup" the installation/setup program crashes. If I hit, "No, start over" the same thing happens and four components don't install. Does this matter? It pops up whenever I restart my computer...

still working on restarting in safe mode, etc...

Thanks :thumbsup:

#6 12g

12g

  • Members
  • 450 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Scotland
  • Local time:05:26 AM

Posted 05 October 2004 - 11:13 AM

Are you downloading the critical updates only? if not please try that first.

#7 booka

booka
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:12:26 AM

Posted 05 October 2004 - 09:17 PM

I did try to download more than just the critical updates. But I'm pretty sure that the components that refuse to install are part of the critical updates: IE6 is the main one that won't install. the others appear to be part of IE6, or at least related to it...

#8 12g

12g

  • Members
  • 450 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Scotland
  • Local time:05:26 AM

Posted 05 October 2004 - 10:38 PM

Ok, continue with the fix and repost a fresh log.

#9 booka

booka
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:12:26 AM

Posted 06 October 2004 - 05:27 AM

Logfile of HijackThis v1.98.2
Scan saved at 6:27:00 AM, on 10/6/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0100)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\SYMANTEC_CLIENT_SECURITY\SYMANTEC ANTIVIRUS\RTVSCN95.EXE
C:\PROGRAM FILES\SYMANTEC_CLIENT_SECURITY\SYMANTEC ANTIVIRUS\DEFWATCH.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\SYMANTEC_CLIENT_SECURITY\SYMANTEC ANTIVIRUS\VPTRAY.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPLPR.EXE
C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPENH.EXE
C:\WINDOWS\WINDOWS UPDATE SETUP FILES\IE6SETUP.EXE
C:\WINDOWS\TEMP\IXP000.TMP\IE6WZD.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\WBEM\WINMGMT.EXE
C:\HJT\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://channels.aimtoday.com/search/aimtoolbar.jsp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://channels.aimtoday.com/search/aimtoolbar.jsp
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: AIM Search - {40D41A8B-D79B-43d7-99A7-9EE0F344C385} - C:\PROGRAM FILES\AIM TOOLBAR\AIMBAR.DLL
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [rtvscn95] C:\PROGRA~1\SYMANT~1\SYMANT~1\rtvscn95.exe
O4 - HKLM\..\RunServices: [defwatch] C:\PROGRA~1\SYMANT~1\SYMANT~1\defwatch.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunOnce: [wextract_cleanup0] rundll32.exe C:\WINDOWS\SYSTEM\advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\TEMP\IXP000.TMP\"
O4 - Startup: Resume Windows Update Installation.lnk = C:\WINDOWS\Windows Update Setup Files\ie6setup.exe
O8 - Extra context menu item: &Define - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O8 - Extra context menu item: Look Up in &Encyclopedia - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O8 - Extra context menu item: &AIM Search - res://C:\PROGRAM FILES\AIM TOOLBAR\AIMBAR.DLL/aimsearch.htm
O9 - Extra button: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra 'Tools' menuitem: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra button: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra 'Tools' menuitem: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: MSN Messenger Service - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRAM FILES\AIM\AIM.EXE
O9 - Extra button: Dell Home - {08DCFC6C-B6E4-480C-95A4-FC64F37B787E} - http://www.dellnet.com/ (file missing) (HKCU)
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O16 - DPF: {E2CF5C45-7CCC-11D4-9BD1-0080C6F60B6A} (CouponsComBrxpdf2 Control) - http://ftp.coupons.com/brxpdf2.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.4.0_01) -
O16 - DPF: {CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA} (Java Runtime Environment 1.4.0_01) -
O16 - DPF: {D30CA0FD-1CA0-11D4-AC78-006008A9A8BC} (WebBasedClientInstall Class) - http://nortonres1.allegheny.edu/webinst/webinst.cab
O16 - DPF: {BAC01377-73DD-4796-854D-2A8997E3D68A} (Yahoo! Photos Easy Upload Tool Class) - http://us.dl1.yimg.com/download.yahoo.com/...ropper1_3us.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061...all/xscan53.cab
O17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain = allegheny.edu
O17 - HKLM\System\CCS\Services\VxD\MSTCP: SearchList = allegheny.edu

#10 12g

12g

  • Members
  • 450 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Scotland
  • Local time:05:26 AM

Posted 06 October 2004 - 09:24 AM

Ok, go Here for more information on the download. I hope that helps you.

#11 booka

booka
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:12:26 AM

Posted 06 October 2004 - 06:26 PM

doing this takes me back to the "resume setup" program from before. And again (I mixed them up earlier) "No, start over" crashes and "Yes, resume" says it can't install all the components "please close all applications and try running setup again" which i don't understand b/c I didn't have anything else running. I checked w/ ctrl+alt+del and here's what it said was running:
Windows Update: IE and Internet tools
Explorer
Winmgmt
Syntpenh
Syntplpr
Systray
Vptray
Ie6setup
i don't know if that's even helpful at all, b/c I dont' know what it means...

#12 booka

booka
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:12:26 AM

Posted 06 October 2004 - 08:03 PM

Also...I finally finished running it in safe mode and deleting everything you said to delete.
But sadly we're still running in sloth-like fashion...

#13 TexasAngel67

TexasAngel67

    Bleeping Helper


  • Members
  • 1,551 posts
  • OFFLINE
  •  
  • Location:Fort Worth
  • Local time:12:26 AM

Posted 06 October 2004 - 10:10 PM

This sounds all too familiar to me. I had the SAME problem with the updates. All because every possible outlook appears that I have IE 6. But when I click on Help and About Internet Explorer, it says it's 5.50 AND my cookies show 5.50 as well. It's the oddest thing that drove me nuts for a long time (I have posted here about it but nothing has changed it) before I finally gave up on it. The only way I could stop that annoying window "Do you wish to resume setup...." from showing on boot up was to uncheck it in MSCONFIG, Startup. To let you know how hard I tried, I went through that garbage TWICE before giving up entirely. It's even listed twice in MSCONFIG, lol.
BTW - is there any way to get rid of the stuff in MSCONFIG we unchecked because they were spyware programs or whatever? Just curious. I'm sorry for butting in on someone else's thread/issue.
At least I know your frustration.
Good luck Booka,
~67~

P.S. I wonder if WinTasks would be of service here. Worth a try Booka. Please consider downloading and installing this. It's free. What it does is locates all the programs running in the foreground and in the background. Your task manager (Ctrl-Alt-Delete) doesn't pull up EVERYTHING running. Obviously, the more programs that are running, the slower our PC's and Laptops will run, in most cases anyway. I suggest WinTasks. One thing I do know for sure is IE6setup and the WindowsUpdate (2 items in your task manager) are eating up resources and slowing things down. I also have ME and it did that to me. These 3, Winmgmt
Syntpenh and Syntplpr I am not familiar with. Please wait for more experienced help on those.

Edited by TexasAngel67, 06 October 2004 - 10:16 PM.


#14 12g

12g

  • Members
  • 450 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Scotland
  • Local time:05:26 AM

Posted 07 October 2004 - 09:46 AM

Hi booka, those are all legit running processes.

Let's try this:

Go CTRL>ALT>DEL>End Task/Process on these;

IE6SETUP.EXE
IE6WZD.EXE


Next:

Make sure all browsers and windows are closed except for hijackthis and put a check against the following and click 'fix checked';

O4 - HKLM\..\RunOnce: [wextract_cleanup0] rundll32.exe C:\WINDOWS\SYSTEM\advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\TEMP\IXP000.TMP\"
O4 - Startup: Resume Windows Update Installation.lnk = C:\WINDOWS\Windows Update Setup Files\ie6setup.exe

Reboot to Normal Mode, then try to update again.

#15 12g

12g

  • Members
  • 450 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Scotland
  • Local time:05:26 AM

Posted 07 October 2004 - 09:59 AM

This sounds all too familiar to me. I had the SAME problem with the updates. All because every possible outlook appears that I have IE 6. But when I click on Help and About Internet Explorer, it says it's 5.50 AND my cookies show 5.50 as well. It's the oddest thing that drove me nuts for a long time (I have posted here about it but nothing has changed it) before I finally gave up on it. The only way I could stop that annoying window "Do you wish to resume setup...." from showing on boot up was to uncheck it in MSCONFIG, Startup. To let you know how hard I tried, I went through that garbage TWICE before giving up entirely. It's even listed twice in MSCONFIG, lol.
BTW - is there any way to get rid of the stuff in MSCONFIG we unchecked because they were spyware programs or whatever? Just curious. I'm sorry for butting in on someone else's thread/issue.
At least I know your frustration.
Good luck Booka,
~67~

P.S. I wonder if WinTasks would be of service here. Worth a try Booka. Please consider downloading and installing this. It's free. What it does is locates all the programs running in the foreground and in the background. Your task manager (Ctrl-Alt-Delete) doesn't pull up EVERYTHING running. Obviously, the more programs that are running, the slower our PC's and Laptops will run, in most cases anyway. I suggest WinTasks. One thing I do know for sure is IE6setup and the WindowsUpdate (2 items in your task manager) are eating up resources and slowing things down. I also have ME and it did that to me. These 3, Winmgmt
Syntpenh and Syntplpr I am not familiar with. Please wait for more experienced help on those.

~67~

When did you last have your HJT log checked? it might be a good idea, if you have any issues, but please start a fresh thread in the HijackThis Logs forum :thumbsup:




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users