| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 103885 | 2009-10-09 14:23:00 | Please help - "End Program - n" on Shut Down | skelseyc (15318) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 818657 | 2010-01-29 03:12:00 | I had this same problem. My internet explorer would work for about 30 seconds and just quit. Then explorer and firefox would neither work, or close correctly. When I restarted the computer, I got the "-n" error. More annoying than anything but after trying every option from mozilla and every option from this thread, I was convinced I was going to need to format my C:Drive. I have windows XP Pro by the way. I used CC Cleaner, I used HiJackthis, I have McAfee Security Center (I did 3 full virus scans) I used spyware detection all kinds of stuff. Nothing found. What could it be? It wasn't until I noticed a suggested software from the Microsoft site until something clicked. I downloaded www.microsoft.com (THE MICROSOFT MALICIOUS SOFTWARE REMOVAL TOOL) First I did a full scan.. i left the room to come back and find my computer had SHUT ITSELF OFF. Then I came back, ran it again with a quick scan. All of the sudden McAfee pops up repeadedly saying " A trojan has been found on your system and has automatically been removed" Please try downloading this tool from microsoft. Right now I am currently in the middle of a full scan, no problems yet, but it will probably run for hours. If you are getting the -n error and firefox, internet explorer is hanging up, chances are you may have a virus just like me. I tried everything, removing and reinstalling firefox, IE8.0, and i removed a bunch of other programs from my computer, and nothing seemed to detect the problem until i used that tool. Let me know how it works for you. |
biggstmack (15325) | ||
| 818658 | 2010-01-29 03:19:00 | Post the hjt log here. You may have missed something | Speedy Gonzales (78) | ||
| 818659 | 2010-01-29 23:53:00 | Without knowing which apps are causing these delays, this is a global "cure all" for this type of situation that has worked for me in the past . on XP Pro . Go to Start>Run>regedit . 1) Navigate to HKEY_CURRENT_USER\Control Panel\Desktop . Select WaitToKillAppTimeout and set the value to 1000 . Select the HungAppTimeout value and set it to 1000 as well . 2) Navigate to HKEY_USERS\ . DEFAULT\Control Panel\Desktop . Set the WaitToKillAppTimeout and set the value to 1000 . Select the HungAppTimeout \newline value and set it to 1000 as well . 3) Navigate to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Contro l . Select the WaitToKillServiceTimeout value and set it to 1000 . Close the Registry Editor . |
Pancake (6359) | ||
| 818660 | 2010-01-30 00:02:00 | Logfile of Trend Micro HijackThis v2.0.3 (BETA) Scan saved at 6:56:41 PM, on 1/29/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\M-AudioTaskBarIcon.exe C:\Program Files\McAfee.com\Agent\mcagent.exe C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe C:\Program Files\McAfee\SiteAdvisor\McSACore.exe C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe C:\Program Files\TrendMicro\HiJackThis\HiJackThis.exe C:\Program Files\McAfee\MPF\MPFSrv.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\M-Audio\Transit\Install\TUSBInst.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\wuauclt.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = us.rd.yahoo.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = us.rd.yahoo.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = go.microsoft.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = go.microsoft.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = go.microsoft.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = go.microsoft.com R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = search.yahoo.com R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = 127.0.0.1 O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file) O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll O4 - HKLM\..\Run: [M-Audio Taskbar Icon] C:\WINDOWS\System32\M-AudioTaskBarIcon.exe O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey O4 - HKLM\..\Run: [McENUI] C:\PROGRA~1\McAfee\MHN\McENUI.exe /hide O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - HKCU\..\Run: [MSKAGENTEXE] C:\PROGRA~1\McAfee\SPAMKI~1\MSKAgent.exe O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - download.mcafee.com O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - upload.facebook.com O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - www.crucial.com O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - download.mcafee.com O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - tools.ebayimg.com O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe O23 - Service: M-Audio Transit Installer (TransitInstallerService) - M-Audio - C:\Program Files\M-Audio\Transit\Install\TUSBInst.exe -- End of file - 6139 bytes |
biggstmack (15325) | ||
| 818661 | 2010-01-30 00:18:00 | CPXwV.sys C:\WINDOWS\system32\drivers\CPXwV.sys HKLM\SYSTEM\CurrentControlSet\Services\\ |
biggstmack (15325) | ||
| 818662 | 2010-01-30 00:37:00 | CPXwV.sys I get this popping up when running Trojan Remover This windows service appears to be using hidden Rootkit Techniques C:\WINDOWS\system32\drivers\CPXwV.sys The program is loaded by the following (hidden) registry key HKLM\SYSTEM\CurrentControlSet\Services\\ |
biggstmack (15325) | ||
| 818663 | 2010-01-30 00:42:00 | So did you get trojan remover to remove it?? Update trojan remover, scan whatever comes up remove it. Then select all options under utilities You can tick these then tick fix checked Close browsers O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file) O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd What have you unticked in msconfig? Wouldnt be surprised if Mcafee is causing it |
Speedy Gonzales (78) | ||
| 818664 | 2010-01-30 19:27:00 | The only items I have unchecked in MS Config are NeroCheck, realsched and TotRecSched. I know what each of those programs are but I dont need them starting up. I deleted some things with CCleaner the in the Tools: Startup. Hopefully I am not missing anything important? |
biggstmack (15325) | ||
| 818665 | 2010-01-30 19:31:00 | I ran trojan remover, the only error that keeps popping up at startup is the one i posted . . everything seems to be working just fine now other than that . . Im looking pretty good no problems with explorer or firefox, also the -n error is missing . I guess it was a hidden virus? When I ran the Windows malicious removal tool, I had Mcaffee security center running and automatically was deleting the virus when it was popping up . I will let you know if I have more problems . Thanks for all your help! |
biggstmack (15325) | ||
| 818666 | 2010-01-30 21:11:00 | Thats what a rootkit does - it hides and tries to avoid detection. Trojan remover should have removed it, if it detected it then you rebooted. Did you tell trojan remover to remove / delete its entry?? I(f you did, it shouldnt be picking it up everytime you reboot | Speedy Gonzales (78) | ||
| 1 2 3 4 5 6 7 8 9 10 11 12 | |||||