Problems with my computer, not sure of cause

[kalen3285]

Hi,

I've been having some problems with my computer and I have no idea what's causing them. My computer config is listed in my profile. I have two problems, one has been going on for months and the other only for the past three days.
The older problem is this: Whenever I go Start->Turn Off Computer->Shut Down OR Restart, the system simply reloads all programs that load at startup. If I choose the same option a second time, it functions normally. This I don't think is serious, just annoying.
The newer is more serious. It happens when I am browsing the web, whether with IE 6 or Firefox 0.9. It functions normally for a while, and then all of a sudden any page I attempt to go to will load (as in, the status bar shows 'opening page', and then says 'done') but the screen goes blank. After this occurs, the browser will not close unless I end its process. Next, the desktop and taskbar "break". No programs will load, right-clicking does nothing, start menu will not load. I have to hold the power button and force the computer to shutdown and bring it back up. This happens several (at least 4-5 times a day). I don't think it's spyware because I run Norton Antivirus, Ad-Aware, ZoneAlarm, and Spybot - Search & Destroy.
As I said earlier, I have no idea what is causing these problems. Any help (especially with the second problem) would be greatly appreciated. Thank you.

[kalen3285]

Anyone have any ideas?

[dammit]

Hi ..although you think you have all the protection you need...it may not be enough...just to check...download 'Hijack This! FROM HERE (http://mjc1.com/files/merijn/HijackThis.exe) create a new folder and put hijack into it Unzip, doubleclick HijackThis.exe, Check for updates first by clicking the config then tools buttons. and hit "Scan".
Create a NEW folder and put HijackThis into it. Open up the program and hit "scan" When the scan is finished, click "Save Log", and copy and paste it in a reply.
It will show what's running on your computer...Don't make any changes until
someone checks it out.;)

[kalen3285]

Okay, I ran HijackThis!. Here's the log:

Logfile of HijackThis v1.97.7
Scan saved at 10:27:49 PM, on 7/29/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbload.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\WINDOWS\System32\CTHELPER.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\VERIZO~1\SUPPOR~1\SMARTB~1\MotiveSB.ex e
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\eBay\eBay Toolbar\4.3.0.9\ebaytbar.exe
C:\Program Files\U.S. Robotics\ControlCenter\Reminder.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\SYSDOC32.EXE
C:\WINDOWS\webshots.scr
C:\Program Files\Verizon Online\SupportCenter\bin\mpbtn.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\foobar2000\foobar2000.exe
C:\Firefox\MOZILL~2\firefox.exe
C:\Program Files\VCOM\PowerDesk\PDExplo.exe
C:\Temp\07-27-2004\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Verizon Online
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.dogpile.com/info.dogpl.toolbar/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,AutoConfigURL = file://c:/windows/desktop/no-ads.pac
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: (no name) - {001F2570-5DF5-11d3-B991-00A0C9BB0874} - C:\Program Files\eBay\eBay Toolbar\4.3.0.9\eBayBand.dll
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5D9FBC9C-5060-EB8A-0D8D-4B83F116460B} - (no file)
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEInt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: BITS HIDE WIPE - {1F4C1730-34C2-AABF-BBC0-F6B3CF30E27A} - C:\RECYCLER\S-1-5-21-1801674531-1767777339-682003330-1004\Dc201\JUMP NAME.dll (file missing)
O3 - Toolbar: eBay Toolbar - {46AE04C0-BCFA-4728-90E7-00EB4A8B3863} - C:\Program Files\eBay\eBay Toolbar\4.3.0.9\eBayBand.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\VERIZO~1\SUPPOR~1\SMARTB~1\MotiveSB.ex e
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [TClockEx] C:\Program Files\TClockEx\TCLOCKEX.EXE
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [SFP] C:\Program Files\Common Files\Verizon Online\SFP\vzSFPWin.EXE /s
O4 - Startup: Norton System Doctor.LNK = C:\Program Files\Norton SystemWorks\Norton Utilities\SYSDOC32.EXE
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
O4 - Global Startup: eBay Toolbar.LNK = C:\Program Files\eBay\eBay Toolbar\4.3.0.9\ebaytbar.exe
O4 - Global Startup: Instant Update Reminder.lnk = ?
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Verizon Online Support Center.lnk = C:\Program Files\Verizon Online\SupportCenter\bin\matcli.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward &Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Download all by Net Transport - C:\Program Files\Xi\NetTransport 2\NTAddList.html
O8 - Extra context menu item: Download by Net Transport - C:\Program Files\Xi\NetTransport 2\NTAddLink.html
O8 - Extra context menu item: Download with Star Downloader - C:\Program Files\Star Downloader\sdie.htm
O8 - Extra context menu item: Enqueue in Star Downloader - C:\Program Files\Star Downloader\sdieenq.htm
O8 - Extra context menu item: Si&milar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: eBay Toolbar (HKLM)
O9 - Extra 'Tools' menuitem: eBay Toolbar (HKLM)
O9 - Extra button: AIM (HKLM)
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab28578.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/04824d0cd5e98ce27716/netzip/RdxIE601.cab
O16 - DPF: {89D75D39-5531-47BA-9E4F-B346BA9C362C} (CWDL_DownLoadControl Class) - http://www.callwave.com/include/cab/CWDL_DownLoad.CAB
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab28578.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://antu.popcap.com/games/popcaploader_v5.cab

I had run HijackThis! previously to remove MySearchNow a while ago... I see that the associated dll (jump name.dll) is still there... but I will wait to make any changes. Hope this helps and thanks for the reply.

[dammit]

Hi again..Close ALL browser Windows, only have HijackThis running.
In HiJackThis, Check the boxes beside the below entries, then click on "Fix checked"

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

O2 - BHO: (no name) - {001F2570-5DF5-11d3-B991-00A0C9BB0874} - C:\Program Files\eBay\eBay Toolbar\4.3.0.9\eBayBand.dll

O2 - BHO: (no name) - {5D9FBC9C-5060-EB8A-0D8D-4B83F116460B} - (no file)

O3 - Toolbar: BITS HIDE WIPE - {1F4C1730-34C2-AABF-BBC0-F6B3CF30E27A} - C:\RECYCLER\S-1-5-21-1801674531-1767777339-682003330-1004\Dc201\JUMP NAME.dll (file missing)

O3 - Toolbar: eBay Toolbar - {46AE04C0-BCFA-4728-90E7-00EB4A8B3863} - C:\Program Files\eBay\eBay Toolbar\4.3.0.9\eBayBand.dll

O4 - Global Startup: eBay Toolbar.LNK = C:\Program Files\eBay\eBay Toolbar\4.3.0.9\ebaytbar.exe

O9 - Extra button: eBay Toolbar (HKLM)

O9 - Extra 'Tools' menuitem: eBay Toolbar (HKLM)

O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/04824d0...ip/RdxIE601.cab

Reboot into Safe Mode.....( tap F8 key during reboot around twice a second, until the boot menu appears...
Make sure you can see Hidden files and Folders:
http://www.xtra.co.nz/help/0,,4155-1916458,00.html
Run a search for then delete the files and Folders: in bold if they still exist.
ebaytbar.exe

Empty your recycle bin.

[kalen3285]

Okay, I did what you said, but I won't be able to tell if it made a difference until monday because I'll be gone for the weekend. Thanks for your help anyway. I'll report back on Monday.

By the way, what is bad about the eBay toolbar?

[kalen3285]

Well, It's still Friday and I have already been able to reproduce the exact same problems twice. Could it be something hardware related maybe?

[bAdWaYz]

This is just a shot in the dark here but maybe its virus related. I know you use Norton but just for the fun of it how about getting AVG and see what it finds. AVG is free for personal use so this isn't pirating or spam. You can download AVG free edition from http://free.grisoft.com/freeweb.php/doc/2/
I would install that and run a scan, sometimes it will find stuff that the big guys won't. Also if you run a scan and don't find anything then it may be hardware related but try the scan first.

[kalen3285]

Hi, sorry I haven't updated in a while, it's been busy. I downloaded AVG and scanned but didn't find anything. A couple of times now when the previous symptoms occured and I tried to do something within the program, I would get a message saying there was not enough memory left to perform the operation.

Also, for some reason, the first problem (having to tell it to reboot/shutdown twice) has disappeared, but everything else still occurs. Thanks for everybody's help even though it hasn't been fruitful so far.

Any more suggestions, throw them my way.

[kalen3285]

Anybody have an idea?

[worknstiff]

hey kalen3285,
WOW, the suggestions are good, looking at the date, almost a year later hopefully it is OK now.
if it is'nt let me suggest a few more ideas:
1st i would strip the startup programs down to only what the system needs to run.
2nd go online and get a PC scan....http://housecall.trendmicro.com
this will list all of what you have on your rig(computer), something might show up that should not be, or you thought it was gone (as in removed)
3rd *delete browser history and cache
4th if you have a GOOD registry cleaner, use it, if not maybe someone can suggest one, i use win cleaner (not @ home, not sure of name of prog.)
thats the only one and have been using it for a few years.