Forum Home
Press F1
 
Thread ID: 87056 2008-02-06 08:50:00 Vista Keeps Freezing For Ever, Please Help AMD3ALL3THE3WAY3 (116) Press F1
Post ID Timestamp Content User
637926 2008-02-06 08:50:00 hi,
just installed avast! after uninstalling AVG and zone alarm (was plainning to install comodo) after rebooting, after avast installation, the computer froze after about 1 minute of me logging in, have to boot in safe mode otherwise it will keep freezing, i ran a virus scan by booting on avast, and cleaned out a few viruses (4), but there is still a problem, any suggestions as to what could be wrong would be appreciated, if you need to know more just ask,

THANKS TONNES!
AMD3ALL3THE3WAY3 (116)
637927 2008-02-06 09:04:00 Post a hijackthis log, its in my sig. Speedy Gonzales (78)
637928 2008-02-06 09:09:00 Post a hijackthis log, its in my sig.

What am i supposed to do with it now?
AMD3ALL3THE3WAY3 (116)
637929 2008-02-06 09:13:00 Put hijackthis in its own folder first. Then run it, then click on scan and save a log.

Copy and paste whats in notepad here. So, I can see whats in it.
Speedy Gonzales (78)
637930 2008-02-06 09:18:00 Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:18:01 p.m., on 6/02/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16386)
Boot mode: Safe mode with network support

Running processes:
E:\Windows\Explorer.EXE
E:\Program Files\Internet Explorer\iexplore.exe
E:\Program Files\DAP\DAP.EXE
E:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = go.microsoft.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.nz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = go.microsoft.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = go.microsoft.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = go.microsoft.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = go.microsoft.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "E:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [NeroFilterCheck] E:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [DownloadAccelerator] "E:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - HKLM\..\Run: [ avast! ] E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [ehTray.exe] E:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [MsnMsgr] "E:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "E:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [NVIDIA nTune] "E:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O8 - Extra context menu item: &Clean Traces - E:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - E:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - E:\Program Files\DAP\dapextie2.htm
O10 - Broken Internet access because of LSP provider 'e:\windows\system32\pnrpnsp.dll' missing
O13 - Gopher Prefix:
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - E:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - E:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - E:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - E:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe

--
End of file - 4199 bytes

Thats what it says, not sure what it means?
AMD3ALL3THE3WAY3 (116)
637931 2008-02-06 09:21:00 need to go to sleep. got 1st day of school tomorrow AMD3ALL3THE3WAY3 (116)
637932 2008-02-06 09:36:00 Run hijackthis again. Tick these then tick fix checked.

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O4 - HKLM\..\Run: [SunJavaUpdateSched] "E:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"

O4 - HKLM\..\Run: [NeroFilterCheck] E:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

If you dont use Nero Home, tick this

O4 - HKCU\..\Run: "E:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"

Get LSPfix (www.cexx.org)

[B]Then tick this entry. Why is this on your system? It's for XP.

Any Vista users, is this file in Vista as well?

O10 - Broken Internet access because of LSP provider 'e:\windows\system32\pnrpnsp.dll' missing

O13 - Gopher Prefix:

I would also get Trojan remover (www.simplysup1.com)

Install this, run it, click on scan. Then select all options under the utilities menu.

I would also uninstall ALL versions of Sun Java. Yours is out of date. Link is in my sig below.
Speedy Gonzales (78)
637933 2008-02-06 10:14:00 Any Vista users, is this file in Vista as well?

O10 - Broken Internet access because of LSP provider 'e:\windows\system32\pnrpnsp.dll' missing


If that's a question then yep, Vista here. I have that file on my system (www.imagef1.net.nz) in that location roughly. Open that PNG with WinRAR if you need the DLL.
sal (67)
637934 2008-02-06 10:27:00 Yep. Got that pnrpnsp.dll file as well. Short for PNRP Name Space Provider.

Don't know what PNRP means though.
qazwsxokmijn (102)
637935 2008-02-06 10:47:00 Cool, thanks for the info guys!

Hmm would the prob be, because Vista is on E not C?
Speedy Gonzales (78)
1 2