Applications errors

[ljc1174]

I have no idea where to post this. I'm in shock! Someone help!

My ZA and Trojanhunter keep crashing and closing. I do a virus scan with Trendmicro and GAV and nothing is found. Anyone ever have this problem?

Did something get into my pc and disable these programs?

[LowWaterMark]

{QUOTE-> quoting: Lori link=board=27;threadid=4749;start=0#31056 date=1036804785]Did something get into my pc and disable these programs? <-QUOTE}
Certainly that is possible... However, it could be other things like a new conflict that has developed because of a recent install or upgrade. Or perhaps it's some other temporary condition on your system. What errors do you get or how does it appear that ZA and TH are failing? Do they just disappear from task list or do you get errors and crash dump files? Do they run a little while before failing, seeming to work, then fail after time? Extra information might help.

For additional opinions on possible infections, you could try more online scanners. Perhaps the Panda Online Scan or another you can link to from here:

http://www.wilders.org/free_services.htm

For possible conflicts... Have you installed anything since your last couple system reboots? Did any application have an upgrade just before this started happening?

If it's an active program on your system killing these off, have you checked the task manager (Ctrl Alt Del) to look for strange running programs? You could check your startups as well for possible malicious programs.

If you want a VERY detailed list of what's run in all the possible startup files and registry on your system, you can download this utility - StartupList:

http://www.lurkhere.com/~nicefiles/index.html

You install that, run it and it produces a long list of all your startup information, which you could cut and paste into a post here. We could help look through it for problems.

LowWaterMark

[ljc1174]

There is a whole lotta crap running!!!

Earlier today, i couldn't open a new IE window because my system resources were too low. Which is absolutely crazy, I had just booted up my pc and connected to the internet.

The only uninstall/install I've made today was removing Easy CD Creator and installing HotBurn by Iomega. I'm going to do the start up list thing.

When ZA crashed, I recieved an error saying the program was closing and it remains in my task bar with a large x in it's place. Trojanhunter did the same and it remains in my task bar/running programs.

Very odd!

Would you like me to post the results of the startup list? IF a trojan or something is there I would never know!
Thanks,
Lori

BTW~ Panda says note: ONLY for systems with NO antivirus installed. ActiveX needs to be enabled.

[LowWaterMark]

{QUOTE-> Would you like me to post the results of the startup list? <-QUOTE}
That would be great, there are several people here who can help us look through the list for odd things.
{QUOTE-> i couldn't open a new IE window because my system resources were too low <-QUOTE}Ah, this could be something... Low resources can certainly cause programs to fail. And having a lot of things running causes low resources. Maybe you are on to it here. The startup list may shed some light on this.

[ljc1174]

But I gave my pc a couple of reboots!

Oh, yah, I noticed the NORTON in my start up list... I thought all that was gone. I guess I have to search some more.

And I still have OE errors when I reboot or boot up from shutdown.

I'm sure this topic needs moved out of Ten-Foward, but I don't know how to move it or where it should even go.
Sorry Paul!

Here's the list...


StartupList report, 11/8/2002, 8:49:55 PM
StartupList version: 1.34.0
Started from : C:\WINDOWS\DESKTOP\STARTUPLIST134\STARTUPLIST.EXE
Detected: Windows ME (Win9x 4.90.3000)
Detected: Internet Explorer v6.00 SP1 (6.00.2800.1106)
* Using default options
==================================================

Running processes:

C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\AVSYNMGR.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\VSSTAT.EXE
C:\WINDOWS\TASKMON.EXE
C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\AVCONSOL.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\MICROSOFT HARDWARE\MOUSE\POINT32.EXE
C:\WINDOWS\LOADQM.EXE
C:\WINDOWS\SYSTEM\SK9910DM.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\WINDOWS\SYSTEM\LVCOMS.EXE
C:\PROGRAM FILES\TROJANHUNTER 2.5\TH_GUARD.EXE
C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\ALOGSERV.EXE
C:\PROGRAM FILES\MCAFEE\MCAFEE SHARED COMPONENTS\GUARDIAN\CMGRDIAN.EXE
C:\WINDOWS\SYSTEM\IGFXTRAY.EXE
C:\WINDOWS\SYSTEM\HKCMD.EXE
C:\PROGRAM FILES\IOMEGA HOTBURN\AUTOLAUNCH.EXE
C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE
C:\PROGRAM FILES\MCAFEE\MCAFEE SHARED COMPONENTS\INSTANT UPDATER\RULAUNCH.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\WORKS SHARED\WKCALREM.EXE
C:\PROGRAM FILES\SOFTWIN\BITDEFENDER FOR MSN MESSENGER\MSNMON.EXE
C:\PROGRAM FILES\EFFICIENT NETWORKS\ENTERNET 300\APP\ENTERNET.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZONEALARM.EXE
C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\VSHWIN32.EXE
C:\PROGRAM FILES\YAHOO!\MESSENGER\YPAGER.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\DESKTOP\STARTUPLIST134\STARTUPLIST.EXE

--------------------------------------------------

Listing of startup folders:

Shell folders Startup:
[C:\WINDOWS\Start Menu\Programs\StartUp]
Microsoft Works Calendar Reminders.lnk = C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
PowerReg SchedulerV2.exe
BitDefender for Yahoo! Messenger.lnk = C:\Program Files\Softwin\BitDefender for Yahoo Messenger\yahmon.exe
BitDefender_P2P_Startup.lnk = C:\WINDOWS\BitDefender_P2P_Startup.exe
BitDefender for MSN Messenger.lnk = C:\Program Files\Softwin\BitDefender for MSN Messenger\msnmon.exe

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

ScanRegistry = C:\WINDOWS\scanregw.exe /autorun
TaskMonitor = C:\WINDOWS\taskmon.exe
PCHealth = C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
SystemTray = SysTray.Exe
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
Hidserv = Hidserv.exe run
POINTER = point32.exe
LoadQM = loadqm.exe
Norton eMail Protect = C:\PROGRAM FILES\NORTON ANTIVIRUS\POProxy.exe
Hot Key Kbd 9910 Daemon = SK9910DM.EXE
DXM6Patch_981116 = C:\WINDOWS\p_981116.exe /Q:A
LVComs = C:\WINDOWS\SYSTEM\LVComS.exe
THGuard = "C:\PROGRAM FILES\TROJANHUNTER 2.5\TH_GUARD.EXE"
Alogserv = C:\Program Files\McAfee\McAfee VirusScan\alogserv.exe
McAfee Guardian = "C:\PROGRAM FILES\MCAFEE\MCAFEE SHARED COMPONENTS\GUARDIAN\CMGRDIAN.EXE" /SU
IgfxTray = C:\WINDOWS\SYSTEM\igfxtray.exe
HotKeysCmds = C:\WINDOWS\SYSTEM\hkcmd.exe
Drag'n'Drop_Autolaunch = "C:\Program Files\Iomega HotBurn\Autolaunch.exe"

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
SchedulingAgent = mstask.exe
SSDPSRV = C:\WINDOWS\SYSTEM\ssdpsrv.exe
*StateMgr = C:\WINDOWS\System\Restore\StateMgr.exe
StillImageMonitor = C:\WINDOWS\SYSTEM\STIMON.EXE
McAfeeVirusScanService = C:\Program Files\McAfee\McAfee VirusScan\AVSYNMGR.EXE

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

MSMSGS = "C:\Program Files\Messenger\msmsgs.exe" /background
McAfee.InstantUpdate.Monitor = "C:\Program Files\McAfee\McAfee Shared Components\Instant Updater\RuLaunch.exe" /startmonitor

--------------------------------------------------

Enumerating Active Setup stub paths:
HKLM\Software\Microsoft\Active Setup\Installed Components
(* = disabled by HKCU twin)

[{89820200-ECBD-11cf-8B85-00AA005B4395}] *
StubPath = regsvr32.exe /s /n /i:U shell32.dll

[>PerUser_MSN_Clean] *
StubPath = C:\WINDOWS\msnmgsr1.exe

[PerUser_LinkBar_URLs] *
StubPath = C:\WINDOWS\COMMAND\sulfnbk.exe /L

[{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] *
StubPath = rundll32.exe advpack.dll,UserInstStubWrapper {44BBA840-CC51-11CF-AAFA-00AA00B6015C}

[{7790769C-0471-11d2-AF11-00C04FA35D02}] *
StubPath = rundll32.exe advpack.dll,UserInstStubWrapper {7790769C-0471-11d2-AF11-00C04FA35D02}

[{9EF0045A-CDD9-438e-95E6-02B9AFEC8E11}] *
StubPath = C:\WINDOWS\SYSTEM\updcrl.exe -e -u C:\WINDOWS\SYSTEM\verisignpub1.crl

[>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] *
StubPath = C:\WINDOWS\inf\unregmp2.exe /ShowWMP

[{89820200-ECBD-11cf-8B85-00AA005B4383}] *
StubPath = C:\WINDOWS\SYSTEM\ie4uinit.exe

--------------------------------------------------

Load/Run keys from C:\WINDOWS\WIN.INI:

load=
run=

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=Explorer.exe
SCRNSAVE.EXE=
drivers=mmsystem.dll power.drv

--------------------------------------------------

Checking for EXPLORER.EXE instances:

C:\WINDOWS\Explorer.exe: PRESENT!

C:\Explorer.exe: not present
C:\WINDOWS\Explorer\Explorer.exe: not present
C:\WINDOWS\System\Explorer.exe: not present
C:\WINDOWS\System32\Explorer.exe: not present
C:\WINDOWS\Command\Explorer.exe: not present

--------------------------------------------------

C:\WINDOWS\WININIT.BAK listing:
(Created 8/11/2002, 18:32:40)

[rename]
NUL=C:\WINDOWS\TEMP\PFTE1F~1\SETUP.EXE
NUL=C:\WINDOWS\TEMP\PFTE1F~1\UDF\XP\DNBUDF.SYS
NUL=C:\WINDOWS\TEMP\PFTE1F~1\UDF\XP
NUL=C:\WINDOWS\TEMP\PFTE1F~1\UDF\NT\DNBUDF.SYS
NUL=C:\WINDOWS\TEMP\PFTE1F~1\UDF\NT
NUL=C:\WINDOWS\TEMP\PFTE1F~1\UDF\2K\DNBUDF.SYS
NUL=C:\WINDOWS\TEMP\PFTE1F~1\UDF\2K
NUL=C:\WINDOWS\TEMP\PFTE1F~1\UDF
NUL=C:\WINDOWS\TEMP\PFTE1F~1

--------------------------------------------------

C:\AUTOEXEC.BAT listing:

SET PATH=C:\WINDOWS;C:\WINDOWS\COMMAND
SET windir=C:\WINDOWS
SET winbootdir=C:\WINDOWS
SET COMSPEC=C:\WINDOWS\COMMAND.COM
SET PROMPT=$p$g
SET TEMP=C:\WINDOWS\TEMP
SET TMP=C:\WINDOWS\TEMP

--------------------------------------------------

C:\WINDOWS\WINSTART.BAT listing:

@C:\WINDOWS\tmpcpyis.bat

--------------------------------------------------

C:\WINDOWS\DOSSTART.BAT listing:

LH C:\PROGRA~1\MICROS~1\MOUSE\MOUSE.EXE

--------------------------------------------------

Checking for superhidden extensions:

.lnk: HIDDEN! (arrow overlay: yes)
.pif: HIDDEN! (arrow overlay: yes)
.exe: not hidden
.com: not hidden
.bat: not hidden
.hta: not hidden
.scr: not hidden
.shs: HIDDEN!
.shb: HIDDEN!
.vbs: not hidden
.vbe: not hidden
.wsh: not hidden
.scf: HIDDEN! (arrow overlay: NO!)
.url: HIDDEN! (arrow overlay: yes)
.js: not hidden
.jse: not hidden

--------------------------------------------------

Enumerating Task Scheduler jobs:

Tune-up Application Start.job
PCHealth Scheduler for Data Collection.job
Scan for Viruses.job

--------------------------------------------------

Enumerating Download Program Files:

[{7A32634B-029C-4836-A023-528983982A49}]
CODEBASE = http://fdl.msn.com/public/chat/msnchat42.cab

[YInstStarter Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\YINSTHELPER.DLL
CODEBASE = http://download.yahoo.com/dl/installs/yinst.cab

[CV3 Class]
InProcServer32 = C:\WINDOWS\SYSTEM\WUV3IS.DLL
CODEBASE = http://windowsupdate.microsoft.com/R1097/V31Controls/x86/mil/en/actsetup.cab

[{49DEC3C0-C71A-11D4-BA38-000102621B9B}]
CODEBASE = http://store.yahoo.net/lib/cursorskins1/MouseMagicCS.cab

[HeartbeatCtl Class]
InProcServer32 = C:\WINDOWS\DOWNLO~1\HRTBEAT.OCX
CODEBASE = http://fdl.msn.com/zone/datafiles/heartbeat.cab

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH.OCX
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

[HouseCall Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\XSCAN53.OCX
CODEBASE = http://a840.g.akamai.net/7/840/537/2002092801/housecall.antivirus.com/housecall/xscan53.cab

[MSN Chat Control 4.5]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\MSNCHAT45.OCX
CODEBASE = http://fdl.msn.com/public/chat/msnchat45.cab

[Update Class]
InProcServer32 = C:\WINDOWS\SYSTEM\IUCTL.DLL
CODEBASE = http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37567.471712963

[MeadCo Security Manager]
InProcServer32 = C:\WINDOWS\SYSTEM\MCSECMGR.DLL
CODEBASE = http://wcs00180.egain.net/wcsapp/weblib/Javascript/messaging/ie/SecMgr.cab

--------------------------------------------------
End of report, 10,107 bytes
Report generated in 1.843 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

[controler]

Hi Lori

You are running ME correct? Why haven't you did a restore to an earlier date? ME only keeps a good boot 5 days back by default and if you wanted say a really good one from day one of a fresh format, you would have to go into restore and creat a point of your own.
Tell me what you have done so far k?
I also see you have Mc afee? Oh OH :(

C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\AVCONSOL.EXE

Oh yes you are correct , You do have a tone of stuff loaded.
You have a tone of security software running at the same time.
You also have the direct link to the downloadable files
CODEBASE = http://wcs00180.egain.net/wcsapp/weblib/Javascript/messaging/ie/SecMgr.cab

ect......

[ljc1174]

Actually, I never thought to create a rescue point! And I've had this pc for over 2 yrs!

I haven't done anything as far as these errors go.
I haven't scanned anything for virus's and I haven't rebooted since za crashed. My virus protection is still enabled.

I did look and za had blocked port 137 b4 it shut down. This could be why...???

[controler]

How many days back did this happen?
I would never dump Norton before Mcafee

Just boot to safe mode and go back the day before all this happened.

[snowy]

LORI

Have been having the very same problem with resource droping to zero........but will get to that in a moment.
read about one tenth of your start-up list.......it appears that you have several anti-virus prograns starting all at the same time.......that could cause a real issue.....only one anti-virus scanner can be resident....the rest you start yourself after shuting down the others....otherwise they may shut each other down or conflict........an be actually be of no use.
numerous programs are in your start-up that just does need to be there.....working in the background draining your resources........FE: msn messenger.......when you need it...if you use it...start it only when you need it.
if I may respectfully say....your start-up needs a good cleaning.
as for your firewall.....un-install it completely......defrag and shut-down,,,re-start and re-install firewall......the new install may well fix any files that may be corrupted....do the same with the other programs that are closing on you...time consuming yes......but alot less time wasted
McAfee....doesn't it have an resident file scanner that scans all downloaded files? if so.....I don't think you need those other virus scanners....BUT PLEASE VERIFY THIS WITH SOME MUCH MORE EXPERIENCED IN ANTI_VIRUS PROGRAMS
you should have a resource meter.....running it just after start-up an see what it shows.....at start-up my os is 96% free........yours should not be less than 70% free
the factory loads EVERYTHING.....the user has the job of shutting it down.

snowman

[LowWaterMark]

Good advice snowman. :)

For myself, I don't see any obvious trojans in the lists. There are a few optional things that you may be able to shutdown to get some resources back, but, much of what appears to be heavy programs are your key security products.
{QUOTE-> I haven't done anything as far as these errors go.
I haven't scanned anything for virus's and I haven't rebooted since za crashed. My virus protection is still enabled. <-QUOTE}
You haven't rebooted at all?? Well, I think you need to do that and see what happens. Without obvious trojans in startups, you shouldn't be any worse off for rebooting.
{QUOTE-> I did look and za had blocked port 137 b4 it shut down. This could be why...??? <-QUOTE}
No, ZA shouldn't fail for that. Everyone is get a bunch of port 137 hits.

Try a reboot... See if ZA and TH stay running and report back to us what happens.

[snowy]

By default System Restore is set at 1300 or so MB.....that much is not needed.....790.....clean disk space after re-setting.
REMEMBER>>> if you do have a virus/trogan System Restore will re-install it if you pick the wrong re-store date...........

snowman

[ljc1174]

Thanks much snowy!!!

I will work on this project tomorrow after I get home from work!

Controller,

I would have kept Norton, but for some reason, it will not work properly on my pc. I've used the version that's bundled and last yr I bought the 2001 cd and had to turn to McAfee.

I know a lot of NAV supporters are screaming, "Why, Why" I honestly don't know.... I tried numerous times to use it, I've even spent days on phone support with NAV and no luck. Needless to say, I've been using McAfee for almost a yr now and it has not once crashed on me!

Thanks for the help!!!

~L

Ok, I'll reboot then jump back on.

[LowWaterMark]

{QUOTE-> quoting: Lori link=board=27;threadid=4749;start=0#31074 date=1036809553]Ok, I'll reboot then jump back on. <-QUOTE}
Great, thanks.

By the way, congratulations on Post #200 here at Wilders. ;D

[snowy]

LORI

in order to keep your os stable while others help you...these programs don't need to be in start-up;

Imoega hotburn

All Messengers (except the McAfee)

Clender Reminders

printer..whichever the name brand you are using


there is a LOT more that needs to go...for now this will help

snowman

[snowy]

PCHEALTH......re-set to collect info.....to anything higher than whats it now is.....my guess is that its set for every few minutes......not needed.

[controler]

Click Start
Click programs
Click assessories
System Tools
System Information
Once the help and support screen comes up
Click on tools
click on Fault Log and there you will see what programs are faulting
page faults ect...


or do a find faultlog.txt

[ljc1174]

By the way, congratulations on Post #200 here at Wilders.

(and I just realized somewhere around post 197 how to edit after posting! LOL


Ok, I think I'm going to need directions to disable some of these things from startup...

I remember Jooske or FanJ or someone helping me once before it may have even been Tony, anyway... there was someplace I went into and removed them from start up, was it msconfig?

[snowy]

Yahoo Messenger...I have it.....EVERYTHING can be taken out of start-up......by the way...careful...it will report on you (spy) unless you set it correctly..

[ljc1174]

{QUOTE-> quoting: controler link=board=27;threadid=4749;start=15#31080 date=1036810202]
Click Start
Click programs
Click assessories
System Tools
System Information
Once the help and support screen comes up
Click on tools
click on Fault Log and there you will see what programs are faulting
page faults ect...


or do a find faultlog.txt

<-QUOTE}

awesome!!! this helps a whole lot more!!!


**********************************************************************
Date 11/07/2002 Time 13:55
WMPLAYER caused an invalid page fault in
module WMP.DLL at 018f:3af0610a.
Registers:
EAX=0056d48c CS=018f EIP=3af0610a EFLGS=00010202
EBX=3ac10000 SS=0197 ESP=0177fc44 EBP=0177fc70
ECX=d52420e0 DS=0197 ESI=3af971e8 FS=6807
EDX=bffbb490 ES=0197 EDI=bff7b07b GS=0000
Bytes at CS:EIP:
8b 08 50 ff 51 08 8b 86 7c 01 00 00 85 c0 74 06
Stack dump:
00000001 00000000 3af7c3d1 3ad6a413 3ad6a47a 3ac10000 00000000 00000001 00000000 3ac10000 84524a2c 0177fe38 bff6df5f 3ac10000 00000001 00000001
**********************************************************************
Date 11/08/2002 Time 05:42
MONEY EXPRESS caused an invalid page fault in
module KERNEL32.DLL at 018f:bff6d6bc.
Registers:
EAX=00000001 CS=018f EIP=bff6d6bc EFLGS=00010297
EBX=81813bc0 SS=0197 ESP=0064f15c EBP=0064f170
ECX=7c0dd678 DS=0197 ESI=00000000 FS=3d67
EDX=81810000 ES=0197 EDI=0064f299 GS=0000
Bytes at CS:EIP:
0f b7 34 71 88 55 fc c0 6d fc 04 0f b6 5d fc 03
Stack dump:
000003b5 81813bc0 0064f298 0064f2ca 840bb003 0064f1a4 bff6d227 81813bc0 81caba8a 81caba8c 0064f298 00000032 00000000 8181a1f0 81cab980 00000001
**********************************************************************
Date 11/08/2002 Time 14:31
MSMSGS caused an invalid page fault in
module MSMSGS.EXE at 018f:00451558.
Registers:
EAX=a0000228 CS=018f EIP=00451558 EFLGS=00010286
EBX=00000001 SS=0197 ESP=007af76c EBP=007af7b0
ECX=005f68f4 DS=0197 ESI=00000000 FS=61bf
EDX=81780000 ES=0197 EDI=005f68f4 GS=61e6
Bytes at CS:EIP:
8b 10 6a 01 8b c8 ff 12 53 8b cf e8 fc 56 00 00
Stack dump:
00000002 007af7a4 005f68f4 004494bd 00000001 000002c1 005f68f4 005b38cc 005b38c4 000002c5 00449d04 000002c3 00449cf0 000002c1 00449ce4 000002bf
**********************************************************************
Date 11/08/2002 Time 16:09
IOMEGA_CD-RW caused an invalid page fault in
module KERNEL32.DLL at 0177:bff7834f.
Registers:
EAX=c002fa54 CS=0177 EIP=bff7834f EFLGS=00250202
EBX=0062fe28 SS=017f ESP=0052ffe0 EBP=0053004c
ECX=00530200 DS=017f ESI=8179337c FS=170f
EDX=bff6682d ES=017f EDI=00530228 GS=0000
Bytes at CS:EIP:
53 56 57 8b 30 83 7d 10 01 8b 4e 38 89 4d f8 75
Stack dump:

**********************************************************************
Date 11/08/2002 Time 17:44
EXPLORER caused an invalid page fault in
module <unknown> at d78e:11c073a6.
Registers:
EAX=00000017 CS=0177 EIP=11c073a6 EFLGS=00010246
EBX=00000000 SS=017f ESP=005afbdc EBP=005afd28
ECX=d7398a30 DS=017f ESI=00000000 FS=56df
EDX=8417f8c4 ES=017f EDI=00000000 GS=0000
Bytes at CS:EIP:

Stack dump:
00000000 575c3a43 4f444e49 455c5357 4f4c5058 2e524552 00455845 bffbb490 bff6b8f7 bffbb490 005404a8 005afc20 bff6b989 8417f864 bff641cf bffbb490
**********************************************************************
Date %1!.02d!/%2!.02d!/%3!.02d! Time %4!.02d!:%5!.02d!
%1 caused a stack fault in module %2 at %3!.04x!:%4!.08x!.
Registers:
EAX=%1!.08x! CS=%2!.04x! EIP=%3!.08x! EFLGS=%4!.08x!
EBX=%1!.08x! SS=%2!.04x! ESP=%3!.08x! EBP=%4!.08x!
ECX=%1!.08x! DS=%2!.04x! ESI=%3!.08x! FS=%4!.04x!
EDX=%1!.08x! ES=%2!.04x! EDI=%3!.08x! GS=%4!.04x!
Bytes at CS:EIP:
%1!.02x! %1!.02x! %1!.02x! %1!.02x! %1!.02x! %1!.02x! %1!.02x! %1!.02x! %1!.02x! %1!.02x! %1!.02x! %1!.02x! %1!.02x! %1!.02x! %1!.02x! %1!.02x!
Stack dump:
%1!.08x! %1!.08x! %1!.08x! %1!.08x! %1!.08x! %1!.08x! %1!.08x! %1!.08x! %1!.08x! %1!.08x! %1!.08x! %1!.08x! %1!.08x! %1!.08x! 1000b1a0 00000000

[LowWaterMark]

Yes, Start > Run... > msconfig > tabs is a good place to "uncheck" some that snowman pointed out.

The startuplist program actually tells you where many are located (registry, files). That could be helpful.

[ljc1174]

{QUOTE-> quoting: snowy link=board=27;threadid=4749;start=15#31082 date=1036810333]


Yahoo Messenger...I have it.....EVERYTHING can be taken out of start-up......by the way...careful...it will report on you (spy) unless you set it correctly..
<-QUOTE}

taking yahoo out my my start up will make me look like a spy?

ha! lol yah, me, a spy... um... why doesn't my income reflect that of a "spy"??? :)

[snowy]

just remove the check...hit APPLY....you will be prompt to re-start you computer.......if in doubt about what to remove just go down the list......focus on programs you personally installed...............also.....don't forget to "clean".......after all done

[controler]

yes MSCONFIG from the run will work kinda and that is the shortcut instead of going through the start , programs, accessories,system tools, system info, clicking the tools tab and selecting system configuration Utility

[snowy]

LOL.....no......LOL...Yahoo spies on you....if the preferences are not set correctly.....

[controler]

I am guessing we don't want to tell how to disable them right in the registry do we? LOL
I think we are all thinking alike on this Friday the 13th


oooooooooooeeeeeeeeeeeeeeeeooooooooooooooooooooo

[ljc1174]

It's bit defender for yahoo that loads at start up.

I don't think this is something I should change, is it?


see, i don't know about these other programs... i don't know what half of them are for!
Is there anything below I should keep at start up?

stillimagemonitor
*statemgr
ssdpsrv
schedulingagent
loadpowerprofile
hotkeyscmds
igfxtray
alogserv
lvcoms
dxm6patch
hot key kbd daemon
loadqm
pointer

[controler]

POWERTOOLS RULES !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[ljc1174]

How funny!!!

I thought the same thing when I first started remodeling my house.... what was I thinking???


I need to get to bed. Tomorrow, I will unistall and defrag and finish the start up stuff.

Thanks again!!!
You guys are great!

[snowy]

Lori

just a couple of the programs you just listed needs to be remove...like Pointer......focus on non M$ stuff first...the rest will come later...


also.....as our friend mentioned above....but with a slight twist added for luck..

accessories
system tools
system information
components
problem devices === hope there are none


so as not to confuse you.....plus to avoid this thread getting super long.....I will bow out now an let the others offer their assistence......very good assistence I might add.

Good Luck Lori

Snowman

[snowy]

LORI

Did you purposely not list Zone Alarm and True Vector as being in your start-up ?????? If those are not in your start-up...then you don't have a working firewall!!
If they are in your start-up...DO NOT UN-CHECK EITHER>


snowman

[LowWaterMark]

{QUOTE-> quoting: snowy link=board=27;threadid=4749;start=15#31098 date=1036814346]Did you purposely not list Zone Alarm and True Vector as being in your start-up ?????? If those are not in your start-up...then you don't have a working firewall!! <-QUOTE}

Great catch snowy!!

I was so busy looking for the "extra" stuff being started that I didn't notice what wasn't there. ::)

Lori -

The absense of Zone Alarm in your startup list (other than having been in the running processs list) is a little surprising, unless you specifically removed it. To "reenable" Zone Alarm at startup, use the ZA user interface to check the startup option. That should put ZA back in startup properly...

Zone Alarm (icon in systray) > Overview > Preferences > Check the box next to "Load ZoneAlarm at startup"

If ZA is not running when you reboot, start it through the Start > Program > Zone Alarm link. Let us know if ZA "falls out of" the startup listing again.

Best Wishes,
LowWaterMark

[Mr.Blaze]

lol ;Dshe got stuff blaze dont even have lol.

yeah id say your system resources very low after looking at that huge list

curently on start up i have 7 items total thats it.

5 after i get help here at wilders i belive two keys dont belong there cause i never seen h-keys like these befor