My computer and mouse is freezing up (Merged)

[momoflarjacm]

My computer is windows me ,It keeps freezing up on me and the mouse will freeze,The only new thing I have added is windows washer . Could this be the problem?

[AnnMarie]

Hi momoflarjacm - welcome to CTH. Try disabling Windows Washer from running at startup and see if you still have the same problem. I dont have this proggie installed on my PC but you have to disable it from Program Options not msconfig. Reboot afterwards and let us know if this helped.

[momoflarjacm]

I changed the washer thing to not start at startup but mouse still kees freezing up on me.And I have to shut down completely to get started again.I am fairly new to computers and it is driving me crazy,I have ran virus scan and it says ther is no virus ,Any ideas?

[AnnMarie]

Hi momoflarjacm - it might help if we can see what is running on your PC at startup. Go here (http://www.cybertechhelp.com/html/downloads/download.php/id/37) and download and run Startup List. It will generate a log file. Copy the log and paste it back into this thread.

[shadypac]

as far as freezing....do you tend to get any type of error messages or anything? If not just out of curiousity what are your system resources/memory? To check right click on My Computer, then click properties, then the "Performance" tab. Does this prob usually happen after being on for a while or does it vary?


If it is just the mouse freezing because i didnt exactly understand the prob? If its just the mouse and you can still tab around try updating the driver or reinstalling the mouse.

[momoflarjacm]

red It is the whole computer that freezes up and sometimes it is when I am online and sometimes when I haven't even got online yet.I get an error message every time that says dwe,exe and someone told me to get rid of winmx and weather bug ,which I did and also the cache and washer program.I am not able to tab around.

[tb525]

Download 'Hijack This!'. http://www.spywareinfo.com/files/hijackthis.zip
Unzip, doubleclick HijackThis.exe, and hit "Scan".

When the scan is finished, click "Save Log", and copy and paste the log in a reply.

Next, press "Config" > "Miscellaneous Tools", and press "Generate Startuplist Log"

This will generate a text file that will list all running processes, all applications that are loaded automatically when you start Windows, and more.

Copy and paste its contents here as well.

[AnnMarie]

Hi again momoflarjacm - are you sure that the error message does not refer to dw.exe? If so, spyware is the likely cause of your problem. From cexx.org:
dw.exe, Movie Network.exe (Downloadware / Mediacharger / Movienetworks) - Displays lots of popup ads as you surf; Mediacharger may also function as a dialer for 1-900 #s for billing of adult movie downloads. Check for removal entries in Add/Remove Programs. I have had reports that the program will try to deter uninstallation by telling you that doing so will mess up your browser. It is, however, bluffing.

Dont worry though, once you post your startup log we can help you get rid of this parasite and any other malware on your PC.

[momoflarjacm]

:no: You are going to think I am a complete idiot but I don't know how to unzip the file,I dl'd it but don't know what to apen it with,I don't remember subscribing to any media thing but I did keep seeing an adult movie thing come up and kept deleting it,So maybe somehow I did,not sure.So how to I unzip the file ? Do i need to dl something to unzip it? Sorry for being so computer clueless,I appreciate your help Very much!

[AnnMarie]

No problem at all momoflarjacm. Just doubleclick on the file and if you have an unzip utility, it will open. If you dont, try Cam Unzip (http://www.camdevelopment.com/cam_unzip/default.htm). Its freeware and quite user friendly.

[momoflarjacm]

I got the startup window info but can't figure out how to copy and paste it to you,thanks alot if I can figure it out I will get back to you.,you have been so helpful.

[AnnMarie]

Dont worry, you are not the first person that has not done this before :)

Open the log file and go to Edit > Select All and then Edit > Copy. Now open your topic at CTH and click on Post Reply at the bottom of the thread. Position your cursor inside the message box, rightclick with your mouse and choose Paste.

[tb525]

Open the log and click 'Edit' and then 'Select All'. Click 'Edit' again and click 'Copy'. Return to the thread and click 'Post Reply'. right click in the message field and choose 'Paste'. Click 'Submit Reply'.

Edit..Sorry AnnMarie!

[momoflarjacm]

thank anne I will try ,oh I was talking to this one person who asked me to look under add/remove and I saw spyware nuker in there and I tried to remove it ,It said it removed but it stayed on the list ,could that be part of the problem?

[AnnMarie]

Spyware Nuker was labelled as Spyware at one stage and it was targeted by Spybot. I dont think this is the case any more. Last I heard, the developer of Spybot accused Spyware Nuker of using a hacked copy of Spybot's encrypted target database.

Did you reboot after you uninstalled Spyware Nuker? If not do so and see if the entry disappears. If it doesnt, we can fix that later.

Edit..Sorry AnnMarie! No problem Tom. I would have answered a bit sooner but I just found out that WinXP's Rover performs tricks! http://www.boomspeed.com/anniefriday/rofl.gif

[momoflarjacm]

StartupList report, 6/4/2003, 7:52:59 AM
StartupList version: 1.52
Started from : C:\WINDOWS\TEMP\STARTUPLIST.EXE
Detected: Windows ME (Win9x 4.90.3000)
Detected: Internet Explorer v5.50 (5.50.4134.0100)
* Using default options
==================================================

Running processes:

C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\POPROXY.EXE
C:\WINDOWS\TASKMON.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\PROGRAM FILES\GATEWAY\GATEWAY INK MONITOR\INKWATCH.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\STARTER.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\PHOTOSMART\PHOTO IMAGING\HPI_MONITOR.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\HP SHARE-TO-WEB\HPGS2WND.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\HP SHARE-TO-WEB\HPGS2WNF.EXE
C:\PROGRAM FILES\REAL\REALPLAYER\REALPLAY.EXE
C:\PROGRAM FILES\YOU'VE GOT PICTURES SCREENSAVER\YGPSSTRA.EXE
C:\PROGRAM FILES\WINMX\WINMX.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAM FILES\AMERICA ONLINE 8.0\AOL.EXE
C:\PROGRAM FILES\AMERICA ONLINE 8.0\WAOL.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\PROGRAM FILES\SYMANTEC\LIVEUPDATE\AUPDATE.EXE
C:\PROGRAM FILES\SYMANTEC\LIVEUPDATE\LUCOMSERVER.EXE
C:\PROGRAM FILES\CAM DEVELOPMENT\CAM UNZIP\CUZ.EXE
C:\WINDOWS\TEMP\STARTUPLIST.EXE

--------------------------------------------------

Listing of startup folders:

Shell folders Startup:
[C:\WINDOWS\Start Menu\Programs\StartUp]
PowerReg Scheduler V3.exe
MySoftware NewsFlash.lnk = C:\Program Files\Common Files\MySoftware\NewsFlsh.exe
CAM UnZip.lnk = C:\Program Files\CAM Development\CAM UnZip\cuz.exe
CAM UnZip Help.lnk = C:\Program Files\CAM Development\CAM UnZip\cuz.chm
CAM UnZip Website.lnk = C:\Program Files\CAM Development\CAM UnZip\CAM UnZip Website.url
Other Products and Updates.lnk = C:\Program Files\CAM Development\CAM UnZip\Other Products and Updates.url
Uninstall CAM UnZip.lnk = C:\Program Files\CAM Development\CAM UnZip\Uninstall\unins000.exe

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

Norton eMail Protect = C:\Program Files\Norton AntiVirus\POPROXY.EXE
NAV DefAlert = C:\PROGRA~1\NORTON~1\DEFALERT.EXE
ScanRegistry = C:\WINDOWS\scanregw.exe /autorun
TaskMonitor = C:\WINDOWS\taskmon.exe
PCHealth = C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
Norton Auto-Protect = C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
InkWatch = C:\PROGRA~1\GATEWAY\GATEWA~1\InkWatch.exe
SystemTray = SysTray.Exe
EnsoniqMixer = C:\WINDOWS\starter.exe
CXMon = "C:\Program Files\Hewlett-Packard\PhotoSmart\Photo Imaging\Hpi_Monitor.exe"
Share-to-Web Namespace Daemon = C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
New.net Startup = rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,NewDotNetStartup
RealTray = C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
MSConfigReminder = C:\WINDOWS\SYSTEM\msconfig.exe /reminder

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run Services

StillImageMonitor = C:\WINDOWS\SYSTEM\STIMON.EXE
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
SchedulingAgent = mstask.exe
SSDPSRV = C:\WINDOWS\SYSTEM\ssdpsrv.exe
*StateMgr = C:\WINDOWS\System\Restore\StateMgr.exe
ScriptBlocking = "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

You've Got Pictures Screensaver = C:\Program Files\You've Got Pictures Screensaver\ygpsstra.exe
WinMX = C:\PROGRAM FILES\WINMX\WINMX.EXE -m

--------------------------------------------------

C:\WINDOWS\WININIT.INI listing:
(Created 4/6/2003, 7:44:10)

[rename]
NUL=C:\WINDOWS\TEMP\_iu14D2N.tmp

--------------------------------------------------

C:\WINDOWS\WININIT.BAK listing:
(Created 4/6/2003, 2:40:8)

[rename]
NUL=C:\WINDOWS\TEMP\REM8021.TMP

--------------------------------------------------

C:\AUTOEXEC.BAT listing:

SET COMSPEC=C:\WINDOWS\COMMAND.COM
SET PATH=C:\WINDOWS;C:\WINDOWS\COMMAND
SET PROMPT=$p$g
SET TEMP=C:\WINDOWS\TEMP
SET TMP=C:\WINDOWS\TEMP
SET windir=C:\WINDOWS
SET winbootdir=C:\WINDOWS

--------------------------------------------------

C:\WINDOWS\WINSTART.BAT listing:

C:\WINDOWS\tmpcpyis.bat

--------------------------------------------------


Enumerating Browser Helper Objects:

(no name) - C:\PROGRAM FILES\YAHOO!\COMPANION\YCOMP5_0_2_5.DLL - {02478D28-C3F9-4efb-9B51-7695ECA05670}
(no name) - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
(no name) - C:\Program Files\NewDotNet\newdotnet4_50.dll - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E}
(no name) - C:\WINDOWS\APPLICATION DATA\GLYUJIGLTR.DLL - {D44B5436-B3E4-4595-B0E9-106690E70A58}

--------------------------------------------------

Enumerating Task Scheduler jobs:

Tune-up Application Start.job
PCHealth Scheduler for Data Collection.job
Scan for Viruses.job
Symantec NetDetect.job
Maintenance-Defragment programs.job
Maintenance-ScanDisk.job
Maintenance-Disk cleanup.job

--------------------------------------------------

Enumerating Download Program Files:

[YInstStarter Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\YINSTHELPER.DLL
CODEBASE = http://download.yahoo.com/dl/installs/yinst.cab

[YahooYMailTo Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\YMMAPI.DLL
CODEBASE = http://us.dl1.yimg.com/download.yahoo.com/dl/installs/essentials/ymmapi_0410.dll

[CDToolCtrl Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\CDTOOL.DLL
CODEBASE = http://free.aol.com/tryaolfree/cdt175/aolcdt175.cab

[{9DBAFCCF-592F-FFFF-FFFF-00608CEC297C}]
CODEBASE = http://download.weatherbug.com/minibug/tricklers/AWS/minibuginstaller.cab

[sys Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\PCPITSTOP.DLL
CODEBASE = http://support.gateway.com/support/contact/formassist.CAB

[Shockwave ActiveX Control]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\DIRECTOR\SWDIR.DLL
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

[MSN Chat Control 4.2]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\MSNCHAT42.OCX
CODEBASE = http://fdl.msn.com/public/chat/msnchat42.cab

[FunnyVoiceCtl Class]
InProcServer32 = C:\WINDOWS\DOWNLO~1\FUNNYV~1.OCX
CODEBASE = http://www.kiddonet.com/kiddonet/cards4halloween/FunnyVoice.ocx

[AOL YGP Screensaver]
InProcServer32 = C:\PROGRAM FILES\YOU'VE GOT PICTURES SCREENSAVER\YGPSCRCNTL.DLL
CODEBASE = http://pak02.pictures.aol.com/ygp/aol/plugin/screensaver/YGPPicScreensaver.1.0.2.5.cab

[ActiveDataObj Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\ACTIVEDATA.DLL
CODEBASE = https://www-secure.symantec.com/techsupp/activedata/ActiveData.cab

[Pulse V5 ActiveX Control]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\AXPULSE5.DLL
CODEBASE = http://www.pulse3d.com/players/english/5.2/win/PulsePlayer5.2AxWin.cab

[QDiagAOLCCUpdateObj Class]
InProcServer32 = C:\WINDOWS\SYSTEM\QDIAGCC.OCX
CODEBASE = http://aolcc.aol.com/computercheckup/qdiagcc.cab

--------------------------------------------------

Enumerating Winsock LSP files:

NameSpace #2: C:\Program Files\NewDotNet\newdotnet4_50.dll
Protocol #1: C:\PROGRAM FILES\NEWDOTNET\NEWDOTNET4_50.DLL
Protocol #2: C:\PROGRAM FILES\NEWDOTNET\NEWDOTNET4_50.DLL
Protocol #9: C:\PROGRAM FILES\NEWDOTNET\NEWDOTNET4_50.DLL
Protocol #10: C:\PROGRAM FILES\NEWDOTNET\NEWDOTNET4_50.DLL

--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

WebCheck: C:\WINDOWS\SYSTEM\WEBCHECK.DLL
UPnPMonitor: C:\WINDOWS\SYSTEM\UPNPUI.DLL
AUHook: C:\WINDOWS\SYSTEM\AUHOOK.DLL

--------------------------------------------------
End of report, 9,136 bytes
Report generated in 0.547 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

[Jade821]

It could be the mouse driver that may need reinstalling but since your computer keeps freezing, have you checked your memory usage? Does your OS get fully loaded and you log in before this happens?

[tb525]

Hi momoflarjacm, Go to Add/Remove Programs and uninstall New.net. Then download and run Spybot-S&D to remove C2 Lop.

Download Spybot - Search & Destroy from here
http://www.lurkhere.com/~nicefiles/index.html


After installing, launch Spybot from the Desktop Icon (Easy Mode),click on the Search For Updates button, search for and install all updates.

Now click on the Check for Problems button and the scan will start. Any Red entries indicate spyware problems that should be fixed to avoid security and/or privacy problems. This is the only kind of problem that is preselected to be fixed. If, after running the scan, Spybot displays red entries, click on the Fix Selected Problems button.

Now click on the Immunize button to protect your PC from known pests and exit.

If you have chosen to install an icon in your Quick Launch bar, Spybot will launch in Advanced Mode. I do not recommend this option for first time users of Spybot.

NOTE: SSD will sometimes not be able to remove all active components in the first 'run'. In that case you will get a dialog asking you to run SSD at next start. Click yes and reboot.
SSD will activate before the system puts these components 'in use', and it will then be able to 'fix' the rest.

[momoflarjacm]

Thank you all for all your help,I did that with what you told me ,My mouse has still froze and computer locked up ,but maybe it will quit doing that.I appreciate everyone being so helpful!

[AnnMarie]

Hi momoflarjacm - nope, if its still doing it, we havent found the problem yet.

Run a new startup list and post it back. You have one or two unneccessary programs running at startup and we can help you trim these back. Once we have done that, we can also check out other causes. For instance, how long have you had your computer and has it ever had a good clean inside?

[momoflarjacm]

Okay I will send startup again and I have had my computer about 2 years and Not sure about the cleaning thing.

[AnnMarie]

Ok, well if you feel confident doing this, open the case and check that the fans are working, free of dust and the air vents are clear. If you need to clean the fans, use a can of compressed air. For the vents, use something like an old toothbrush. Be careful not to touch any components for fear of zapping them with static (get some help with this if a cleanup is needed - grounding is essential when working inside the case). You can buy anti-static bracelets from most computer outlets.

If you dont feel confident opening the case, check the back of the computer without opening the case and see how much air is moving from the back of the case where the fan is located. There should be a fair amount of air moving and it should be warm, not hot.

[momoflarjacm]

StartupList report, 6/7/2003, 9:33:15 PM
StartupList version: 1.52
Started from : C:\WINDOWS\TEMP\STARTUPLIST.EXE
Detected: Windows ME (Win9x 4.90.3000)
Detected: Internet Explorer v5.50 (5.50.4134.0100)
* Using default options
==================================================

Running processes:

C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\POPROXY.EXE
C:\WINDOWS\TASKMON.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\PROGRAM FILES\GATEWAY\GATEWAY INK MONITOR\INKWATCH.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\STARTER.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\PHOTOSMART\PHOTO IMAGING\HPI_MONITOR.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\HP SHARE-TO-WEB\HPGS2WND.EXE
C:\PROGRAM FILES\REAL\REALPLAYER\REALPLAY.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\HP SHARE-TO-WEB\HPGS2WNF.EXE
C:\PROGRAM FILES\YOU'VE GOT PICTURES SCREENSAVER\YGPSSTRA.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\AMERICA ONLINE 8.0\AOL.EXE
C:\PROGRAM FILES\AMERICA ONLINE 8.0\WAOL.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\PROGRAM FILES\CAM DEVELOPMENT\CAM UNZIP\CUZ.EXE
C:\WINDOWS\TEMP\STARTUPLIST.EXE

--------------------------------------------------

Listing of startup folders:

Shell folders Startup:
[C:\WINDOWS\Start Menu\Programs\StartUp]
PowerReg Scheduler V3.exe
Other Products and Updates.lnk = C:\Program Files\CAM Development\CAM UnZip\Other Products and Updates.url

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

Norton eMail Protect = C:\Program Files\Norton AntiVirus\POPROXY.EXE
NAV DefAlert = C:\PROGRA~1\NORTON~1\DEFALERT.EXE
ScanRegistry = C:\WINDOWS\scanregw.exe /autorun
TaskMonitor = C:\WINDOWS\taskmon.exe
PCHealth = C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
Norton Auto-Protect = C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
InkWatch = C:\PROGRA~1\GATEWAY\GATEWA~1\InkWatch.exe
SystemTray = SysTray.Exe
EnsoniqMixer = C:\WINDOWS\starter.exe
CXMon = "C:\Program Files\Hewlett-Packard\PhotoSmart\Photo Imaging\Hpi_Monitor.exe"
Share-to-Web Namespace Daemon = C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
RealTray = C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
MSConfigReminder = C:\WINDOWS\SYSTEM\msconfig.exe /reminder

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run Services

StillImageMonitor = C:\WINDOWS\SYSTEM\STIMON.EXE
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
SchedulingAgent = mstask.exe
SSDPSRV = C:\WINDOWS\SYSTEM\ssdpsrv.exe
*StateMgr = C:\WINDOWS\System\Restore\StateMgr.exe
ScriptBlocking = "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

You've Got Pictures Screensaver = C:\Program Files\You've Got Pictures Screensaver\ygpsstra.exe

--------------------------------------------------

C:\WINDOWS\WININIT.BAK listing:
(Created 7/6/2003, 19:42:10)

[rename]
NUL=C:\WINDOWS\TEMP\GLB1A2B.EXE

--------------------------------------------------

C:\AUTOEXEC.BAT listing:

SET COMSPEC=C:\WINDOWS\COMMAND.COM
SET PATH=C:\WINDOWS;C:\WINDOWS\COMMAND
SET PROMPT=$p$g
SET TEMP=C:\WINDOWS\TEMP
SET TMP=C:\WINDOWS\TEMP
SET windir=C:\WINDOWS
SET winbootdir=C:\WINDOWS

--------------------------------------------------

C:\WINDOWS\WINSTART.BAT listing:

C:\WINDOWS\tmpcpyis.bat

--------------------------------------------------


Enumerating Browser Helper Objects:

(no name) - C:\PROGRAM FILES\YAHOO!\COMPANION\YCOMP5_0_2_5.DLL - {02478D28-C3F9-4efb-9B51-7695ECA05670}
(no name) - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}

--------------------------------------------------

Enumerating Task Scheduler jobs:

Tune-up Application Start.job
PCHealth Scheduler for Data Collection.job
Scan for Viruses.job
Symantec NetDetect.job
Maintenance-Defragment programs.job
Maintenance-ScanDisk.job
Maintenance-Disk cleanup.job

--------------------------------------------------

Enumerating Download Program Files:

[YInstStarter Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\YINSTHELPER.DLL
CODEBASE = http://download.yahoo.com/dl/installs/yinst.cab

[YahooYMailTo Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\YMMAPI.DLL
CODEBASE = http://us.dl1.yimg.com/download.yahoo.com/dl/installs/essentials/ymmapi_0410.dll

[CDToolCtrl Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\CDTOOL.DLL
CODEBASE = http://free.aol.com/tryaolfree/cdt175/aolcdt175.cab

[sys Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\PCPITSTOP.DLL
CODEBASE = http://support.gateway.com/support/contact/formassist.CAB

[Shockwave ActiveX Control]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\DIRECTOR\SWDIR.DLL
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

[MSN Chat Control 4.2]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\MSNCHAT42.OCX
CODEBASE = http://fdl.msn.com/public/chat/msnchat42.cab

[FunnyVoiceCtl Class]
InProcServer32 = C:\WINDOWS\DOWNLO~1\FUNNYV~1.OCX
CODEBASE = http://www.kiddonet.com/kiddonet/cards4halloween/FunnyVoice.ocx

[AOL YGP Screensaver]
InProcServer32 = C:\PROGRAM FILES\YOU'VE GOT PICTURES SCREENSAVER\YGPSCRCNTL.DLL
CODEBASE = http://pak02.pictures.aol.com/ygp/aol/plugin/screensaver/YGPPicScreensaver.1.0.2.5.cab

[ActiveDataObj Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\ACTIVEDATA.DLL
CODEBASE = https://www-secure.symantec.com/techsupp/activedata/ActiveData.cab

[Pulse V5 ActiveX Control]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\AXPULSE5.DLL
CODEBASE = http://www.pulse3d.com/players/english/5.2/win/PulsePlayer5.2AxWin.cab

[QDiagAOLCCUpdateObj Class]
InProcServer32 = C:\WINDOWS\SYSTEM\QDIAGCC.OCX
CODEBASE = http://aolcc.aol.com/computercheckup/qdiagcc.cab

--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

WebCheck: C:\WINDOWS\SYSTEM\WEBCHECK.DLL
UPnPMonitor: C:\WINDOWS\SYSTEM\UPNPUI.DLL
AUHook: C:\WINDOWS\SYSTEM\AUHOOK.DLL

--------------------------------------------------
End of report, 7,538 bytes
Report generated in 0.358 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

[AnnMarie]

Hi again momoflarjacm - there are a number of Startups that you dont need. Go to Start > Run and type:

msconfig

then OK. Click on the Startup tab and uncheck the below entries:

PCHealth = C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s

Not required. From MS Newsgroups: Pchschd.exe is set to run every 10 minutes but actually does little and has virtually no impact on the running of the system. This program simply checks when run to see if your system is currently idle, if not it then simply checks again in 10 minutes. If however the system is idle and has been for the last few minutes it launches winmgmt.exe which collects details of the current system configuration after which pchschd is set to check again in six hours. There have been a number of reports of winmgmt.exe not exiting when it has completed the collection of data and even cases where it has consumed all available cpu cycles.

InkWatch = C:\PROGRA~1\GATEWAY\GATEWA~1\InkWatch.exe

Not required. Associated with Canon (and maybe other) printers. Tells you when the ink's running low and asks if you want to buy another cartridge on-line

CXMon = "C:\Program Files\Hewlett-Packard\PhotoSmart\Photo Imaging\Hpi_Monitor.exe"

Not required. Autodetects when a HP camera is attached to the computer and launches the "HP Photoimaging Software". Available via Start -> Programs

Share-to-Web Namespace Daemon = C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe

Not required. HP's Share-to-Web software makes it easy to share content with others through our affiliate Internet websites." Available via Start -> Programs

MSConfigReminder = C:\WINDOWS\SYSTEM\msconfig.exe /reminder

Not required. Displays selective startup reminder when you boot.

SSDPSRV = C:\WINDOWS\SYSTEM\ssdpsrv.exe

Simple Service Discovery Protocol (SSDP) and General Event Notification Architecture (GENA) services for network plug and play functionality. Starts up a web server on port 5000. You can read about it here (http://grc.com/UnPnP/UnPnP.htm) and download Steve Gibsons Unplug n Pray utility.

If you decide that you wish to re-enable any of the above programs to start when Windows loads, you can do so by running msconfig again and rechecking the items.

When you have rebooted, open your browser and go to Tools > Internet Options and click on the General Tab. Click on Settings (next to Temporary Internet Files) and then click on View Objects. Rightclick on each and choose Properties. If there is anything there that you dont know what it is (microsoft, apple, macromedia etc are OK) or where it came from,delete it. If there are any damaged controls there, delete those also.

Did you see my post about opening your case and checking for dust etc? Let us know how you get on.

[momoflarjacm]

Thanks once again ,so far so good,!:D

[AnnMarie]

OK, I'll keep my fingers crossed :D Please post back in a day or two and update us.

[momoflarjacm]

I am still having the problem and now my cursor thing goes crazy and clicks on everything and boots me when I'm online.And the cursor freezes up even when I'm not online,Could it be the mouse itself?

[AnnMarie]

Hi momoflarjacm - it could well be the mouse. Can you borrow one from a friend to test it?

[marki61542]

If the problem is not the mouse,,it is more than likely you will need to get more memory.Get another stick of memory and i'm sure that will solve your problems

[sfinnerty]

Hello. Has anyone considered that this could be due to the Windows ME issue with KB891711? This post sounds exactly like all of those posts. Do you happen to recall if this started happening shortly after doing a Windows update? Do a search of the forums on 'KB891711'. You'll probably find your answer.

[AnnMarie]

Welcome to CTH sfinnerty. Thanks for your input. It is appreciated but the original problem was posted June 4th, 2003 (dont worry I have been sucked in by someone resurrecting an old post too). :)

Your observation is correct though. Had this been a recent post, KB891711 could well have been the culprit.

[sfinnerty]

Ah, no I hadn't noticed that. Thanks.