Forum Home
Press F1
 
Thread ID: 98130 2009-03-12 12:21:00 Intermittent Black Screen and Slow PC paulT1010 (14698) Press F1
Post ID Timestamp Content User
755868 2009-03-15 03:54:00 My latest HT log is:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:22:20 PM, on 15/03/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Paul\Desktop\Utilities\HijackThis\HijackT his.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\ctfmon.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = optuszoo.ninemsn.com.au
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Malicious Scripts Scanner - {55EA1964-F5E4-4D6A-B9B2-125B37655FCB} - C:\Documents and Settings\All Users\Application Data\Prevx\pxbho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [Openwares LiveUpdate] C:\Program Files\LiveUpdate\LiveUpdate.exe
O4 - HKLM\..\Run: [ avast! ] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - www.nvidia.com
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - housecall65.trendmicro.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - update.microsoft.com
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - update.microsoft.com
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PREVXAgent - Prevx - C:\Program Files\Prevx2\PXAgent.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

--
End of file - 5660 bytes
paulT1010 (14698)
755869 2009-03-15 03:55:00 Go to start/run type eventvwr

Go to system and / or application. Look for any X's.

Double click on them (look for the times this black screen appears).

Then click on the icon under the down arrow. Paste it here
Speedy Gonzales (78)
755870 2009-03-15 03:57:00 Did you run WinSockFix? After that, if it doesn't work try this:

Go Run>cmd

Type in "netsh int ip reset resetlog.txt"

and press enter

A while ago a member was getting black screen, and replacing the winsock stack fixed it

Blam
Blam (54)
755871 2009-03-15 04:51:00 Speedy, here is the Event Viewer entry. There seems to be a good correlation between the times and this SCM error.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 15/03/2009
Time: 12:51:10 PM
User: N/A
Computer: BEAST
Description:
The following boot-start or system-start driver(s) failed to load:
Aavmker4
aswSP
Fips
intelppm
sp_rsdrv2
TfFsMon
TfSysMon

For more information, see Help and Support Center at go.microsoft.com
paulT1010 (14698)
755872 2009-03-15 04:54:00 I ran the WinSockFix earlier and it didn't change the symptoms. I have just completed the winsock stack fix command and am hesitant to go back into full mode..... paulT1010 (14698)
755873 2009-03-15 05:05:00 Speedy I think I have found the first instance of the event----

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 8/03/2009
Time: 6:20:09 PM
User: N/A
Computer: BEAST
Description:
The following boot-start or system-start driver(s) failed to load:
AFD
Fips
intelppm
IPSec
MRxSmb
NetBIOS
NetBT
pctfw2
PREVXTdi
RasAcd
Rdbss
Tcpip
WS2IFSL

For more information, see Help and Support Center at go.microsoft.com
paulT1010 (14698)
755874 2009-03-15 05:08:00 Speedy, here is the Event Viewer entry. There seems to be a good correlation between the times and this SCM error.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 15/03/2009
Time: 12:51:10 PM
User: N/A
Computer: BEAST
Description:
The following boot-start or system-start driver(s) failed to load:
Aavmker4
aswSP
Fips
intelppm
sp_rsdrv2
TfFsMon
TfSysMon

For more information, see Help and Support Center at go.microsoft.com

Ok that error may mean those drivers are corrupt

Uninstall Spyware terminator, Avast for now. Whats Fips?

Is this an AMD or Intel system??

Then reboot, then see what happens

Get this and run it (avast.com)

Select C:\Program Files\Alwil Software, just to make sure all of Avast gets removed (make sure you select this folder, because it'll delete whatever folder you select)

Then reboot again
Speedy Gonzales (78)
755875 2009-03-15 07:10:00 That's Spyware Terminator and Avast removed. I have an Intel Pent 4 3.4GHz. As for fips, here's what I found www.file.net paulT1010 (14698)
755876 2009-03-15 07:16:00 Cool. Is it better than before??

Or does it take longer for this prob to happen?

You could try reinstalling Avast, if you like (download it again, just in case)
Speedy Gonzales (78)
755877 2009-03-15 07:23:00 It is certainly booting up and accessign the net a lot quicker. As for locking up, not yet, but I've been in safe mode all afternoon. Until now!! What do I need to do regarding those items found with the Event Viewer? paulT1010 (14698)
1 2 3 4