2 quesrions Plz,1 lockup,2 kaspersky antivirus

hello all plz gope someone can help,
situation 1,
started maybe 2 weeks ago, (am wondering if Norton firewall or antivirus updates, -heard NAv put out a bad NAV update.
PROBLEM be on chat room, or email and computer flat free/lock up, pushing ctrl,alt,delete no good only way to unfreeze,unlock is hold powerbutton in till power shuts off,any idea what might be causeing this,
pulled out noton firewall replace with ZA, still happened,
just pulled out Norton antivirus,
now trying kaspersky antivirus,
running win98se with ie 5.5-for last 3 yrs
dsl expert package with external modem 5100B
(wonder IF I NEED TO maybe start useing IE 6.1)
ran virus scans every file/folder with norton nothing,
Thank u for the help, "
p.s. no problems shutting down or starting up
==============
situation 2,
am trying the trial ware of Kaspersky antivirus,(1)am wondering if or does it show the boot up scan, or just run unseen,and YES have box cked to start scan when system starts. but when booting up don't see any scan or scanning message,(2) will this antivirus protect/detect any virus's ,email at yahoo,,,
Thanks for the help,"jazzy"

 

Hi Jazzy, I would start with making sure your Windows is fully up-to-date, including the latest IE 6.1. Then take a look at the following thread:

https://www.wilderssecurity.com/showthread.php?t=15913

and follow its advice for running Hijack This and posting a log in that forum...

Hope this helps...

Cheers

 

Since these questions are more related to possible AV issues, and not board related (which the General Topics forum is for)_I will move this thread to our "Other Anti-Virus Software" forum shortly. Thread has been moved - snap

Regards,

snap

 

hello Blackspear,have & use both Spybot & AdAware, never tried hijack this,(unknown to me, is it like adaware, am going to down load ie6 or 6.1 as far as updates yes use the microsoft CATOLOG to update all past/presant updates, thanks for the the help,"jazzy"

 

hello Blackspear, here is the results of the scan list, should i delete all these or try to fix them, have no idea what this is telling me, thanks "jaz"

Logfile of HijackThis v1.97.7
Scan saved at 4:32:54 PM, on 6/24/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v5.51 SP2 (5.51.4807.2300)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\NORTON UTILITIES\NPROTECT.EXE
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\PROGRAM FILES\KASPERSKY LAB\KASPERSKY ANTI-VIRUS PERSONAL\KAVSVC.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\COMPAQ\CPQINET\CPQINET.EXE
C:\WINDOWS\ptsnoop.exe
C:\PROGRAM FILES\KASPERSKY LAB\KASPERSKY ANTI-VIRUS PERSONAL\KAV.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZONEALARM.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAM FILES\NORTON UTILITIES\SYSDOC32.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\DESKTOP\FIX IT UTILITIES\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dslhome.prodigy.net
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.presario.net/scripts/redirectors/presario/srchredir.dll?c=2c00&s=searchbar&LC=0409
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.presario.net/scripts/redirectors/presario/srchredir.dll?c=2c00&s=searchbar&LC=0409
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://www.yahoo.com/
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] c:\windows\taskmon.exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [CPQInet] c:\compaq\CPQInet\CpqInet.exe
O4 - HKLM\..\Run: [PTSNOOP] ptsnoop.exe
O4 - HKLM\..\Run: [NPROTECT] C:\Program Files\Norton Utilities\NPROTECT.EXE
O4 - HKLM\..\Run: [CookieWall] C:\PROGRAM FILES\ANALOGX\COOKIEWALL\COOKIE.EXE
O4 - HKLM\..\Run: [CountrySelection] pctptt.exe
O4 - HKLM\..\Run: [KAVPersonal50] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe /minimize
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [Hidserv] Hidserv.exe run
O4 - HKLM\..\RunServices: [NPROTECT] C:\Program Files\Norton Utilities\NPROTECT.EXE
O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
O4 - HKLM\..\RunServices: [kavsvc] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
O4 - Startup: Norton System Doctor.lnk = C:\Program Files\Norton Utilities\SYSDOC32.EXE
O4 - Global Startup: ZoneAlarm.lnk = C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
O9 - Extra button: Translate (HKLM)
O9 - Extra 'Tools' menuitem: AV &Translate (HKLM)
O9 - Extra 'Tools' menuitem: &Find Pages Linking to this URL (HKLM)
O9 - Extra 'Tools' menuitem: Find Other Pages on this &Host (HKLM)
O9 - Extra 'Tools' menuitem: AV Home (HKLM)
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O16 - DPF: ConferenceRoom Java Client - http://66.246.11.137:8000/java/cr.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?38161.1449537037
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/vso/en-us/tools/mcfscan/2,0,0,4368/mcfscan.cab

 

Hi jazzy1120,

If you deleted everything listed in your Hijackthis log, your computer would no longer work. Hijackthis will list list the good and bad entries, most will be good and essential to your computers operation.

Your log looks clean to me, but I am seeing KAV, Nortons, and left over bits of McAfee AV. Which one are you using now?

Regards,

snap

 

oh OK THANK U

hello "Snap" THANK U for the help, I've as said never heard of "HIjack" think I'll just stay with SPYBot & adAWARE,"jazzy"

 

HijackThis just takes a snapshot of your system and allows you to identify where problem areas could be. It's a useful tool to see what you have installed and makes it easy for you to post info so others can help to identify any problems.

Spybot and Aware are limited by what is in their definititions, which aren't bad, but they do miss quite a bit.

You might also want to try Ewido. Pretty good stuff.
http://www.ewido.net/en/

BTW you have way too much crap on your computer. I'm surprised you haven't had problems sooner. Just use 1 AV and 1 firewall program. Only the massively paranoid have more than 1. Kav and Zonealarm are sufficient. Uninstall all the others.

Norton.NAV doesn't uninstall cleanly. Head over to the support section of Symantec, do a search and download "RNAV". It will clean all the Norton reg keys and dlls out of your system.

 

happened again 755 am

hello all again THANK U for the good help, but after took out IE5.5,& INSTALLED IE 6 & all updates, clean defragged,virus scanned (105215 folders,files)took out norton antivirus installed Kaspersky antivirus, ran ad aware,spybot S & D-3.1, all worked ok until 755 this morning,
had 2 yahoo emails open, (copy 1 yahoo email to another uahoo email) computer again froze,locked up,held power button in, power shut off restarted,auto ran scan disk, then booted up ok, any other suggestions,
Thanks for the help, "jazzy"

 

Are you overclocking?