PDA

View Full Version : Desperately need help!!!!



SouthernLady
2006-04-17, 03:51
I'm at wit's end and I don't know what else to do. When I'm on the internet, my computer will reboot. It seems to have something to do with MSN messenger or ICQ, but at times it reboots when neither are on. My virus scan is updated and no viruses have been found. Scan disk has not solved the problem either. Also when I shut my computer down, I get a blue screen, which I have been told is "Blue Death". My operating system is Windows 98 and I'm so frustrated that I'm ready to chunk my computer out the window. Is there any hope of salvaging my system? I would appreciate any help you could give me. Thank you.

LonnyRJones
2006-04-19, 23:59
Welcome

To start Please go here and follow instructions.
http://forums.spybot.info/showthread.php?t=288
Post the Hijackthis log here in this thread.
Someone will then take a look at the system and advise you.

SouthernLady
2006-04-21, 13:43
I know you ask to be more specific, but it's all Greek to me. lol! I attempted to run ActiveScan Online Virus Scan, but my computer wouldn't stay booted long enough to run the entire scan. Here's my HJT log. Thank you so much for your help! :)



Logfile of HijackThis v1.99.1
Scan saved at 6:36:10 AM, on 4/21/06
Platform: Windows 98 Gold (Win9x 4.10.1998)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\LEXBCES.EXE
C:\WINDOWS\SYSTEM\RPCSS.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGCC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGEMC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGAMSVR.EXE
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\PROGRAM FILES\FINEPIXVIEWER\QUICKDCF.EXE
C:\PROGRAM FILES\YAHOO!\MESSENGER\YMSGR_TRAY.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\HIJACK THIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://home.bellsouth.net/brw_minisearch
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.excite.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.bellsouth.net
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Bellsouth® Internet Service
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [LexmarkPrinTray] PrinTray.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [LexStart] Lexstart.exe
O4 - HKLM\..\Run: [VortexTray] C:\WINDOWS\au30setp.exe 3
O4 - HKLM\..\Run: [Nitro5x] c:\nitro5x\nitro5x.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGCC.EXE /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGEMC.EXE
O4 - HKLM\..\Run: [AVG7_AMSVR] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGAMSVR.EXE
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - Startup: Exif Launcher.lnk = C:\Program Files\FinePixViewer\QuickDCF.exe
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZSYYYYYYYYUS
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM\MSJAVA.DLL
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM\MSJAVA.DLL
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe (file missing)
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=http://home.bellsouth.net
O16 - DPF: {01118A01-3E00-11D2-8470-0060089874ED} (SupportSoft Script Runner Class) - https://password.bellsouth.net/sdccommon/download/tgctlsr.cab
O16 - DPF: {2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} (MiniBugTransporterX Class) - http://wdownload.weatherbug.com/minibug/tricklers/AWS/MiniBugTransporter.cab?
O16 - DPF: {8FA9D107-547B-4DBC-9D88-FABD891EDB0A} - http://playroom.icq.com/odyssey_web11.cab
O16 - DPF: {A8683C98-5341-421B-B23C-8514C05354F1} (FujifilmUploader Class) - http://photo.walmart.com/photo/uploads/FujifilmUploadClient.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab

LonnyRJones
2006-04-21, 15:17
Start Hijackthis and place a check next to these items If there.
These are Optional fix's
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearc...p=ZSYYYYYYYYUS (http://bar.mywebsearch.com/menusearch.html?p=ZSYYYYYYYYUS)
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe (file missing)
====================================
Hit fix checked and close Hijackthis.

In the windows control panel > system >device manager are there any exclimation points (yellow marks) ? if so write down the detals for us

SouthernLady
2006-04-21, 23:18
Thank you, Lonny for your swift response. There were no yellow marks. Should this alone solve my problem?

Thank you.

LonnyRJones
2006-04-22, 00:21
Go visit windows update, get all critical updates reboot if prompted then revisit windowsupdate and get any third party updates if any are listed ?

besides the intermitant bluescreen and shutdonw Are there any other odd symtoms/problems on that PC ?

SouthernLady
2006-04-22, 16:18
Go visit windows update, get all critical updates reboot if prompted then revisit windowsupdate and get any third party updates if any are listed ?

besides the intermitant bluescreen and shutdonw Are there any other odd symtoms/problems on that PC ?




Critical Updates have been downloaded and installed. I didn't see any thire party updates,

I'm still getting the blue screen occassionally, but not as often as before. My computer is also still rebooting, but only a couple of times in a two hour period.

SouthernLady
2006-04-22, 16:38
I'm also getting a box which pops up with this message fairly often: "Microsoft Internet Explorer has encountered a problem and needs to close." When I click on the link for more details, it says the problem is unknown.

LonnyRJones
2006-04-22, 20:33
In addremove programs start the uninstall of internet explorer then choose the repair option.

Another thing to try is system file checker
http://www.microsoft.com/Windows98/usingwindows/maintaining/tips/beginner/sysfilecheck.asp

Have you ever updated your video adapter software ?

SouthernLady
2006-04-23, 01:18
In addremove programs start the uninstall of internet explorer then choose the repair option.

Another thing to try is system file checker
http://www.microsoft.com/Windows98/usingwindows/maintaining/tips/beginner/sysfilecheck.asp

Have you ever updated your video adapter software ?



I attempted to repair IE per your instructions and received the following message: "Windows could not repair Internet Explorer. Please run setup again." Do I need to download Explorer off the internet? I have dialup and it would take forever.

I ran the system file check, per your instructions, and several problems were fixed.

I've not updated my video card. I have Voodoo 3 2000. I'm very computer illerate and attempted to find an updated driver on the internet, but with no luck. Do I need to continue to look for this?

LonnyRJones
2006-04-23, 02:39
Any improvment after running system file checker ?

You'l need to be online to do this.
Try running ie6setup.exe
C:\Program Files\Internet Explorer\ie6setup.exe
X install now typical
yes at next prompt

If its not there look here >
C:\WINDOWS\Windows Update Setup Files\ie6setup.exe

SouthernLady
2006-04-23, 06:38
Problems! I ran ie6setup.exe and when done windows rebooted and now I have ie 4.0 but I have no browser connection to the internet (using a friends computer to post this. I went to Add/Remove programs and IE of any version is not showing there. System was better before I tried the ie6setup but it is very unstable now. I did a search for ie6setup.exe on my backup hard drive and ran it from there and it is down loading ie 6.0 again. What now?

LonnyRJones
2006-04-23, 15:20
Are you able to use your backup and get the PC back to before all the trouble ?

SouthernLady
2006-04-23, 16:34
A little over a year ago, I reformated my main hard drive. Before doing this, I moved several programs/folders to my other hard drive. When I reinstalled, what I thought was IE6 yesterday, in reality I installed a much earlier version which was left on my main hard drive. I attempted to install IE6 off my second hard drive, but when it was within 1000 k of being installed, it froze up. Always at the same point. I went to download.com using this earlier IE (which kept informing me of numerous script errors). I then downloaded the system pack for IE6 to my main hard drive - C - Program files - Internet Explorer. I then installed it. So far so good. I've got IE6 running again, and my system seems to be running better. Of course I'm keeping my fingers crossed. lol

LonnyRJones
2006-04-24, 02:01
Good
Post back in a few days to let us know how its running.

SouthernLady
2006-04-24, 02:10
I will. Thank you, Lonny, so much for all your help. :)

SouthernLady
2006-04-25, 00:37
I'm still having problems. I've had the following blue screens appear:


A fatal exception OE has occurred at 0028:C0030489

A fatal exception OE has occurred at 0028:C00152FB in VXD VMM (01) *00142FB


My computer has already rebooted three times in a short period.

Please advise. Thank you.

LonnyRJones
2006-04-25, 00:41
I think perhaps taking it to a local PC shop is the way to go here

SouthernLady
2006-04-25, 01:22
Ok. Thank you for all your help.