HELP! win xp crashes to desktop when playing games

[akf1116]

my computer always crashes to the desktop whenever i play games. My internet browser crashes alot too. My motherboard is and nforce board and i used driver cleaner 2 to get rid of all the old drivers (det 52.16) when i installed my new video card ( ati 9600 pro with cat 3.10 drivers). could this be a virus? Norton anti virus comes up with nothing but i did have welchia and blaster worms on here before. any suggestions?

[renegade600]

tell about your computer, ram, harddrive size/space available. Did this just start or was it this way from the start. Give examples of games you are playing when they crash.

[Mobo]

First please get Spybot S&D to clear out most of the spyware.

Short tutorial and download link here:
http://tomcoyote.org/SPYBOT/

Fix everything SpybotSD labels in red.

Then after reboot:
Download 'Hijack This!'. http://www.tomcoyote.org/hjt/
Unzip, doubleclick HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, save the log, load it in Notepad, and copy its contents here. Most of what it lists will be harmless or even essential, don't fix anything yet.

[akf1116]

i have spybot and spyware blaster my rig is athlon xp 3200 with 512mb of ram and a ati 9600 pro video card. I've had this problem from somewhere in the beginning i dont think it was like this until i got blaster and welchia virus. I got rid of those with the symantec removal tools but my system is still really unstable.

[akf1116]

Logfile of HijackThis v1.97.7
Scan saved at 12:46:27 PM, on 1/25/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\sstray.exe
C:\Program Files\Motherboard Monitor 5\MBM5.EXE
C:\Program Files\RMBC Internet\dialer.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\Program Files\Avant Browser\iexplore.exe
C:\Program Files\Avant Browser\aHTTP.exe
C:\Documents and Settings\Kalani\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Down with Billy Gates
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [MBM 5] "C:\Program Files\Motherboard Monitor 5\MBM5.EXE"
O17 - HKLM\System\CCS\Services\Tcpip\..\{2B1BA611-06C3-4516-AE76-34A477CE1847}: NameServer = 216.126.136.250 216.126.128.40
O17 - HKLM\System\CS3\Services\Tcpip\..\{2B1BA611-06C3-4516-AE76-34A477CE1847}: NameServer = 216.126.136.250 216.126.128.40

[akf1116]

can anyone tell me if im all clean? thnx in advance



Logfile of HijackThis v1.97.7
Scan saved at 12:46:27 PM, on 1/25/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\sstray.exe
C:\Program Files\Motherboard Monitor 5\MBM5.EXE
C:\Program Files\RMBC Internet\dialer.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\Program Files\Avant Browser\iexplore.exe
C:\Program Files\Avant Browser\aHTTP.exe
C:\Documents and Settings\Kalani\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Down with Billy Gates
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [MBM 5] "C:\Program Files\Motherboard Monitor 5\MBM5.EXE"
O17 - HKLM\System\CCS\Services\Tcpip\..\{2B1BA611-06C3-4516-AE76-34A477CE1847}: NameServer = 216.126.136.250 216.126.128.40
O17 - HKLM\System\CS3\Services\Tcpip\..\{2B1BA611-06C3-4516-AE76-34A477CE1847}: NameServer = 216.126.136.250 216.126.128.40

[dammit]

Looks Ok to me. (I like the R1 entry )

[Mobo]

Certainly a clean log anyway

[dammit]

I am a bit worried by this one
C:\Program Files\RMBC Internet\dialer.exe
but can't find enough info on it at the mo....maybe someone else knows it.

[AnnMarie]

I have merged your threads to avoid duplication of replies akf1116

I would also be interested to know what the below process is.

C:\Program Files\RMBC Internet\dialer.exe