Forum Home
Press F1
Thread ID: 113770	2010-11-03 06:24:00	HiJack log help please	jupiter1 (2578)	Press F1

Post ID	Timestamp	Content	User
1150084	2010-11-03 06:24:00	Hi Team, I am getting occasional BSoD and system hangs. Win 2K pro sr4: P4-2.532: gig ram 160Gb hdd. Silly me didn't note error code on BSoD's. System hangs (usually on Moziller firefox but then this is what is used most), nought works except Cntrl. Alt Del. or reset. Sometime just the USB2 mouse/cursor stops working. Unpluging and re-pluging usually fixes this. Spybot, Adware, Avast anti V, and zone alarm and malwarebytes, all kept at latest update all run clean. HiJack log is attached. Can some kind person appraise this and advise any corrections which may result in a more stable system please. Thank you all in advance. Phil. C:\WINNT\system32\svchost.exe C:\WINNT\system32\Ati2evxx.exe C:\WINNT\Explorer.EXE C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE C:\Program Files\Hijack this\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.nz/ O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp O4 - HKLM\..\Run: [ avast! ] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKUS\.DEFAULT\..\Run: [internat.exe] internat.exe (User 'Default user') O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user') O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - update.microsoft.com O16 - DPF: {9732FB42-C321-11D1-836F-00A0C993F125} (mhLabel Class) - www.pcpitstop.com O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINNT\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINNT\system32\ati2sgag.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Dcfssvc - Eastman Kodak Company - C:\WINNT\system32\drivers\dcfssvc.exe O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: ptssvc - KODAK - C:\Program Files\KODAK\KODAK EASYSHARE Software\bin\ptssvc.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINNT\system32\ZoneLabs\vsmon.exe -- End of file - 4547 bytes	jupiter1 (2578)
1150085	2010-11-03 06:31:00	I would wait and see what the stop error code is, and whether it shows the name of a file / driver. The log looks ok to me. Is this win 2000?	Speedy Gonzales (78)
1150086	2010-11-03 06:35:00	I would wait and see what the stop error code is, and whether it shows the name of a file / driver . The log looks ok to me . Is this win 2000? Yes, Windows 2K pro sr4 plus all other updates .	jupiter1 (2578)
1150087	2010-11-03 06:49:00	Cant see anything in that log that maybe nasty. It maybe an addon in FF How many did you install?	Speedy Gonzales (78)
1150088	2010-11-03 06:54:00	Cant see anything in that log that maybe nasty. It maybe an addon in FF How many did you install? Just done a delete progy (mozilla) including regedit to remove all mozilla references and re-install of ver 3.6.12 Only addons are Noscript and addblock. Allways had these two in though and this problem only recently started.	jupiter1 (2578)
1150089	2010-11-03 06:56:00	Did you uninstall it first before doing that?	Speedy Gonzales (78)
1150090	2010-11-03 07:01:00	Did you uninstall it first before doing that? B4 doing what ? I did the un-install and regedit bit before downloading and installing 3.6.12 But the origonal 3.6.12 had been in and working a while. This problem had been occuring on two earlier updates though	jupiter1 (2578)
1150091	2010-11-03 07:09:00	Did you uninstall it first before doing that? Just a thought. This frequently happens when Zone alarm "internet lock" is on and machine is sitting with my home page up but un-used. Home page is Air NZ grabaseat. ?????	jupiter1 (2578)
1150092	2010-11-03 07:09:00	Thats ok then, did you delete its folders in program files / documents as well?? One of the files in one of the folders may have been stuffed why it was playing up. Why is internet lock on?? Doesnt they kill access to the net? I dont know havent used ZA for yonks	Speedy Gonzales (78)
1150093	2010-11-03 07:17:00	Thats ok then, did you delete its folders in program files / documents as well?? Please explain. No folders in Progfile/docs. or progfile/mozilla/docs All mozille folders deleted in reg edit "current user/software" and "local machine/software". One of the files in one of the folders may have been stuffed why it was playing up. Why is internet lock on?? Doesnt they kill access to the net? I dont know havent used ZA for yonks Inet lock on because It does kill acces to the inet while Im away doing other things and like to keep nasties out.	jupiter1 (2578)
1 2