PDA

View Full Version : A few minor issues



goodiesguy
04-10-2010, 09:57 PM
I have been having some funny few issues with my pc. here are some:

Every few days, i will be on my pc, and it will just freeze.

Using Audacity, Adobe Audition etc.. sometimes causes my screens to go blank, and then i get a very garbled image on my second monitor, which in turn requires me to restart.

My computer doesn't restart, i have to power off and turn back on, even when changing things in the Bios.

If i restart or press the restart button, my monitors will go into standby mode, and the hard drives will idle.

Sometimes when i turn my computer off, it will come back on as soon as it shuts down and will give me an Award Boot Block checksum error and "INSERT SYSTEM DISK".

I have tried numerous CMOS batteries all to no avail, only letting me do a restart successfully once (when a new one is first put in).

Apart from theses issues, my pc seems to go fine, and i can browse internet and watch dvds and listen to music fine (which is what i mostly do).

I will post a hijackthis log below. i ran a quick malwarebytes anti-malware scan in safe mode yesterday and it found 1 infection. I use Avast 5 Free. I did use MSSE, but i found it hanging my system sometimes (have been using avast for about 2 months now), should i go back to MSSE? is it better than it was 2 months ago?

here's the hijackthis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:48:58 p.m., on 4/10/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 SP3 (8.00.6001.18702)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Alwil Software\Avast5\AvastSvc.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\SOUNDMAN.EXE
D:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\uTorrent\uTorrent.exe
D:\Program Files\Windows Live\Messenger\msnmsgr.exe
D:\Program Files\Messenger\msmsgs.exe
D:\Program Files\UltraMon\UltraMon.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Java\jre6\bin\jqs.exe
D:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
D:\WINDOWS\system32\svchost.exe
D:\Program Files\Windows Live\Contacts\wlcomm.exe
D:\WINDOWS\system32\wuauclt.exe
D:\Program Files\foobar2000\foobar2000.exe
D:\Program Files\Mozilla Firefox\firefox.exe
D:\Program Files\Mozilla Firefox\plugin-container.exe
D:\Documents and Settings\Nathan\Local Settings\Application Data\Google\Update\1.2.183.29\GoogleCrashHandler.e xe
D:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O1 - Hosts: 66.98.148.65 auto.search.msn.com
O1 - Hosts: 66.98.148.65 auto.search.msn.es
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - D:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - D:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - D:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - D:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [avast5] D:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [uTorrent] "D:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [msnmsgr] "D:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "D:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: UltraMon.lnk = ?
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - D:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - D:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - D:\Documents and Settings\Nathan\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O20 - Winlogon Notify: Antiwpa - D:\WINDOWS\SYSTEM32\antiwpa.dll
O23 - Service: avast! Antivirus - AVAST Software - D:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - D:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - D:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - D:\Program Files\Java\jre6\bin\jqs.exe

--
End of file - 5400 bytes

Speedy Gonzales
04-10-2010, 10:26 PM
Well it looks like you're using utorrent and a pirated version of XP

That wont help things

Did you add these?? If you didnt tick them

O1 - Hosts: 66.98.148.65 auto.search.msn.com

O1 - Hosts: 66.98.148.65 auto.search.msn.es

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE

O4 - HKCU\..\Run: [uTorrent] "D:\Program Files\uTorrent\uTorrent.exe"

O4 - HKCU\..\Run: [msnmsgr] "D:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [MSMSGS] "D:\Program Files\Messenger\msmsgs.exe" /background

goodiesguy
04-10-2010, 10:32 PM
It's Genuine XP, I used a genuine XP disk with genuine key, all genuine.

I chose for utorrent and Messenger to start up at start up. SOUNDMAN is to do with Realtek AC '97.

Speedy Gonzales
04-10-2010, 10:34 PM
Whats this then? Its not part of XP

O20 - Winlogon Notify: Antiwpa - D:\WINDOWS\SYSTEM32\antiwpa.dll

I know what soundman is, but it doesnt have to be in startup

goodiesguy
04-10-2010, 10:36 PM
O20 - Winlogon Notify: Antiwpa - D:\WINDOWS\SYSTEM32\antiwpa.dll

= used the crack as i am unsure if windows will activate, as the XP disk and its serial key is used on 3 different computers in our house

Speedy Gonzales
04-10-2010, 10:38 PM
Well there you go its pirated. Since youre using it on more than 1 PC. And you're avoiding activation

goodiesguy
04-10-2010, 10:41 PM
Why is using it on more than 1PC make it pirated? it's genuine, we own the disk and key, they are our computers etc...

Speedy Gonzales
04-10-2010, 10:42 PM
Because it is. If one cd was made for a house, it would have 5-6 keys. It doesnt. Read the EULA

goodiesguy
04-10-2010, 10:44 PM
I will read the EULA.

SoniKalien
04-10-2010, 10:47 PM
checked memory?

goodiesguy
04-10-2010, 10:54 PM
I have changed my memory lots and lots. i have 4 256 ddr400 sticks of ram. my motherboard has 2 ram slots. i have 1 512mb stick but that is damaged and was the cause of all my issues earlier in the year

Snorkbox
04-10-2010, 11:00 PM
And the EULA agreement says? I guess you have had time to read same by now.

Refer here in case you can't find it.

http://www.google.co.nz/search?q=Windows+XP+EULA

goodiesguy
04-10-2010, 11:05 PM
You may install, use, access, display and run one copy of the Product on a single computer,
such as a workstation, terminal or other device (“Workstation Computer”). The Product may not be used by
more than two (2) processors at any one time on any single Workstation Computer. You may permit a maximum
of ten (10) computers or other electronic devices (each a “Device”) to connect to the Workstation Computer to
utilize the services of the Product solely for File and Print services, Internet Information Services, and remote
access (including connection sharing and telephony services). The ten connection maximum includes any indirect
connections made through “multiplexing” or other software or hardware which pools or aggregates connections.
Except as otherwise permitted by the NetMeeting, Remote Assistance, and Remote Desktop features described
below, you may not use the Product to permit any Device to use, access, display or run other executable software
residing on the Workstation Computer, nor may you permit any Device to use, access, display, or run the Product
or Product’s user interface, unless the Device has a separate license for the Product.

zqwerty
04-10-2010, 11:09 PM
What is ctfmon.exe And Why Is It Running?:

http://www.howtogeek.com/howto/windows-vista/what-is-ctfmonexe-and-why-is-it-running/

I always get rid of this whenever I use any computer for any length of time.

goodiesguy
04-10-2010, 11:11 PM
I have no idea waht ctfmon.exe is.

am reading the link

fred_fish
04-10-2010, 11:11 PM
So... YES, you are a pirate.:eek:

Snorkbox
04-10-2010, 11:12 PM
So what part of that do you fail to understand?

goodiesguy
04-10-2010, 11:15 PM
That's the first time i have ever read the EULA. And i will activate windows LEGALLY.

fred_fish
04-10-2010, 11:19 PM
so you were making a false statement when you clicked the "I have read and agree to the EULA" box when installing each time...:)

Speedy Gonzales
04-10-2010, 11:24 PM
What is ctfmon.exe And Why Is It Running?:

http://www.howtogeek.com/howto/windows-vista/what-is-ctfmonexe-and-why-is-it-running/

I always get rid of this whenever I use any computer for any length of time.

Its for asian users. You can either disable it during the install. Or go to control panel / regional and language options / languages / details / advanced. Tick turn off advanced text services.

Removing the ctfmon entries from startup wont stop it from coming up (the language bar)

Snorkbox
04-10-2010, 11:30 PM
That's the first time i have ever read the EULA. And i will activate windows LEGALLY.

Which, in fact, will require you to buy a copy which may be difficult now as XP is getting to be pulled from shelves as we speak.

You can go get Win7 of course but you might have to uprade the RAM and other things.

goodiesguy
04-10-2010, 11:32 PM
Once i upgrade my ram and a few other things, i was already planning on getting Win7. that is why i havent really bothered to activate XP legally.

Chilling_Silence
05-10-2010, 06:16 AM
Goodiesguy, you've been told more than once about pirating software. Ignorance of the law is no excuse. If a product has actually gone to the trouble of telling you "Hi, I've been activated on too many PC's, that's not legal, I'm an illegal copy", then surely you should stop to think for a moment and wonder *why* it might just be telling you that!

Take some time out to think about it, you've been warned before.