Forum Home
Press F1
Thread ID: 126735	2012-09-15 15:08:00	Calling Sir Speedy Again	SurferJoe46 (51)	Press F1

Post ID	Timestamp	Content	User
1301221	2012-09-15 15:08:00	Different 'puter - but I've had a very bad time with it the past few days . I ran the MSSE scan and it found basically nothing, but the last time I rebooted, I got the Asus splash screen, and that's been gone for long long time . I'm also getting lots of "X Is Not Responding" notices in the blue bar at the top of some windows . My Task Manager shows a lot of ram action at about 75% . This is my Asus Eee-PC, 1G RAM, MSSE, Win 7 Starter, not much out of the ordinary for this unit but it is running on WIFI (mine) . I suspect this is a problem:: O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GO36F4~1 . DLL I also don't like this::: O23 - Service: Oberon Media Game Console service (OberonGameConsoleService) - Unknown owner - C:\Program Files\Asus\Game Park\GameConsole\OberonGameConsoleService . exe Logfile of Trend Micro HijackThis v2 . 0 . 4 Scan saved at 7:53:50 AM, on 9/15/2012 Platform: Windows 7 SP1 (WinNT 6 . 00 . 3505) MSIE: Internet Explorer v9 . 00 (9 . 00 . 8112 . 16448) Boot mode: Normal Running processes: C:\windows\System32\smss . exe C:\windows\system32\csrss . exe C:\windows\system32\csrss . exe C:\windows\system32\wininit . exe C:\windows\system32\winlogon . exe C:\windows\system32\services . exe C:\windows\system32\lsass . exe C:\windows\system32\lsm . exe C:\windows\system32\svchost . exe C:\windows\system32\svchost . exe c:\Program Files\Microsoft Security Client\MsMpEng . exe C:\windows\System32\svchost . exe C:\windows\System32\svchost . exe C:\windows\system32\svchost . exe C:\windows\system32\svchost . exe C:\windows\system32\svchost . exe C:\windows\System32\spoolsv . exe C:\windows\system32\svchost . exe C:\Windows\System32\AsusService . exe C:\Program Files\BlueStacks\HD-LogRotatorService . exe C:\Program Files\Asus\Game Park\GameConsole\OberonGameConsoleService . exe C:\windows\system32\svchost . exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC . EXE C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM . exe C:\windows\system32\svchost . exe C:\Windows\system32\WUDFHost . exe C:\windows\system32\Dwm . exe C:\windows\Explorer . exe C:\windows\system32\taskhost . exe C:\Program Files\Synaptics\SynTP\SynTPEnh . exe C:\Program Files\Synaptics\SynTP\SynAsusAcpi . exe C:\Program Files\EeePC\HotkeyService\HotkeyService . exe C:\Program Files\EeePC\HotkeyService\HotKeyMon . exe C:\Program Files\EeePC\SHE\SuperHybridEngine . exe C:\Program Files\Synaptics\SynTP\SynTPHelper . exe C:\windows\system32\wbem\wmiprvse . exe C:\Program Files\Boingo\Boingo Wi-Fi\Boingo Wi-Fi . exe C:\Program Files\Microsoft IntelliPoint\ipoint . exe C:\Windows\System32\igfxtray . exe C:\Windows\System32\igfxpers . exe C:\Windows\System32\spool\drivers\w32x86\3\EKIJ500 0MUI . exe C:\Program Files\Microsoft Security Client\msseces . exe C:\windows\system32\igfxsrvc . exe C:\windows\system32\SearchIndexer . exe C:\Program Files\Windows Sidebar\sidebar . exe C:\Program Files\Microsoft IntelliPoint\dpupdchk . exe C:\Program Files\Microsoft Works\WkCalRem . exe C:\windows\system32\svchost . exe C:\Program Files\Windows Media Player\wmpnetwk . exe C:\windows\system32\svchost . exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis . exe C:\Program Files\Mozilla Firefox\firefox . exe C:\windows\system32\wbem\wmiprvse . exe C:\windows\System32\svchost . exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus . msn . com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = . microsoft . com/fwlink/?LinkId=69157" target="_blank">go . microsoft . com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = . microsoft . com/fwlink/?LinkId=54896" target="_blank">go . microsoft . com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = . microsoft . com/fwlink/?LinkId=54896" target="_blank">go . microsoft . com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = . microsoft . com/fwlink/?LinkId=69157" target="_blank">go . microsoft . com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim . dll O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin . dll O2 - BHO: ASUS Windows 7 Starter Helper - {D381FF29-7CFB-4D4E-B92A-C4EDDC696614} - C:\Program Files\asus\SystemSetting\StarterHelper . dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv . dll O4 - HKLM\ . . \Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh . exe O4 - HKLM\ . . \Run: [HotkeyService] AsusSender . exe C:\Program Files\EeePC\HotkeyService\HotkeyService . exe O4 - HKLM\ . . \Run: [HotKeyMon] AsusSender . exe C:\Program Files\EeePC\HotkeyService\HotKeyMon . exe O4 - HKLM\ . . \Run: [SuperHybridEngine] AsusSender . exe C:\Program Files\EeePC\SHE\SuperHybridEngine . exe O4 - HKLM\ . . \Run: [SynAsusAcpi] %ProgramFiles%\Synaptics\SynTP\SynAsusAcpi . exe O4 - HKLM\ . . \Run: [OOBESetup] C:\Program Files\asus\OOBERegBackup\OOBERegBackup . exe /restore -"C:\Program Files\asus\OOBERegBackup\OOBEReg . ini" O4 - HKLM\ . . \Run: [Boingo Wi-Fi] "C:\Program Files\Boingo\Boingo Wi-Fi\Boingo . lnk" O4 - HKLM\ . . \Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint . exe" O4 - HKLM\ . . \Run: [IgfxTray] C:\windows\system32\igfxtray . exe O4 - HKLM\ . . \Run: [HotKeysCmds] C:\windows\system32\hkcmd . exe O4 - HKLM\ . . \Run: [Persistence] C:\windows\system32\igfxpers . exe O4 - HKLM\ . . \Run: [EKIJ5000StatusMonitor] C:\windows\system32\spool\DRIVERS\W32X86\3\EKIJ500 0MUI . exe O4 - HKLM\ . . \Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces . exe" -hide -runkey O4 - HKLM\ . . \Run: [EEESplendidAR] C:\Program Files\ASUS\EPC\EeeSplendid\AutoRun . exe O4 - HKLM\ . . \Run: [AsusVibeLuncher] C:\Program Files\Asus\AsusVibe\AsusVibeLauncher . exe /start O4 - HKLM\ . . \Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9 . 0\Reader\Reader_sl . exe" O4 - HKLM\ . . \Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1 . 0\AdobeARM . exe" O4 - HKCU\ . . \Run: [Google Update] "C:\Users\SurferJoe-ASUS\AppData\Local\Google\Update\GoogleUpdate . exe" /c O4 - HKCU\ . . \Run: [googletalk] C:\Users\SurferJoe-ASUS\AppData\Roaming\Google\Google Talk\googletalk . exe /autostart O4 - HKCU\ . . \Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar . exe /autoRun O4 - HKUS\S-1-5-19\ . . \Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar . exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\ . . \RunOnce: [mctadmin] C:\Windows\System32\mctadmin . exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\ . . \Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar . exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\ . . \RunOnce: [mctadmin] C:\Windows\System32\mctadmin . exe (User 'NETWORK SERVICE') O4 - Startup: WkCalRem . LNK = C:\Program Files\Microsoft Works\WkCalRem . exe O4 - Global Startup: AsusVibeLauncher . lnk = C:\Program Files\ASUS\AsusVibe\AsusVibeLauncher . exe O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\windows\system32\GPhotos . scr/200 O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts . dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension . dll O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts . dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension . dll O9 - Extra button: Invia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - (no file) O9 - Extra 'Tools' menuitem: I&nvia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - (no file) O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp . dll O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp . dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler . dll O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GO36F4~1 . DLL O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\system32\Macromed\Flash\FlashPlayerUpda teService . exe O23 - Service: Asus Launcher Service (AsusService) - Unknown owner - C:\Windows\System32\AsusService . exe O23 - Service: BlueStacks Android Service (BstHdAndroidSvc) - BlueStack Systems, Inc . - C:\Program Files\BlueStacks\HD-Service . exe O23 - Service: BlueStacks Log Rotator Service (BstHdLogRotatorSvc) - BlueStack Systems, Inc . - C:\Program Files\BlueStacks\HD-LogRotatorService . exe O23 - Service: Google Desktop Manager 5 . 9 . 1005 . 12335 (GoogleDesktopManager-051210-111108) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop . exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc . - C:\Program Files\Google\Update\GoogleUpdate . exe O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc . - C:\Program Files\Google\Update\GoogleUpdate . exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService . exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice . exe O23 - Service: Oberon Media Game Console service (OberonGameConsoleService) - Unknown owner - C:\Program Files\Asus\Game Park\GameConsole\OberonGameConsoleService . exe -- End of file - 8924 bytes	SurferJoe46 (51)
1301222	2012-09-15 23:27:00	The first program that you listed looks like it belongs to Chrome. The 2nd maybe this (gamepark.asus.com) These dont have to be in startup O4 - HKLM\..\Run: [Persistence] C:\windows\system32\igfxpers.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" Get ccleaner install it then go to tools / startup / scheduled tasks tab. If the flash update entry is here delete it	Speedy Gonzales (78)
1301223	2012-09-16 02:01:00	Got it. I'll kill those entries when I get home this evening.	SurferJoe46 (51)
1