Tip: Run a free scan for common Windows errors ad

re: System freezes then reboots while surfind Tuesday, September 7, 2004 at 9:55 am Posted by mark (1036 messages posted) Can you access the BIOS to then find out the cpu temperature? If it's too high(the cpu temp)that could be causing this. On Tuesday, September 7, 2004 at 8:33 am, Sparky wrote: >I have found no particular pattern but while surfing with Netscape 7.2, every now >and then when I click a link, just before the browser shows the new page, the system >just freezes for about 5 seconds then starts booting up. Sometimes, in the course >of an hour, it will do this 5 or 6 times. > >Help!!! [Reply or follow-up to this message] re: System freezes then reboots while surfind Tuesday, September 7, 2004 at 10:05 am Posted by Broni (1423 messages posted) Get, and run: - Spybot - Ad-Aware Make sure, you get the latest updates for the two above - CWShredder(BTN link) - HijackThis. Don't fix anything in "HijackThis", just post its log back here. ********************************* =========================>> Smartercomputing On Tuesday, September 7, 2004 at 8:33 am, Sparky wrote: >I have found no particular pattern but while surfing with Netscape 7.2, every now >and then when I click a link, just before the browser shows the new page, the system >just freezes for about 5 seconds then starts booting up. Sometimes, in the course >of an hour, it will do this 5 or 6 times. > >Help!!! [Reply or follow-up to this message] re: System freezes then reboots while surfind Wednesday, September 8, 2004 at 7:05 am Posted by Cyber Cowboy 009 (104 messages posted) Hello Sparky,here's a good online scan: BitDefender Free Online Virus Scan On Tuesday, September 7, 2004 at 8:33 am, Sparky wrote: >I have found no particular pattern but while surfing with Netscape 7.2, every now >and then when I click a link, just before the browser shows the new page, the system >just freezes for about 5 seconds then starts booting up. Sometimes, in the course >of an hour, it will do this 5 or 6 times. > >Help!!! [Reply or follow-up to this message] re: System freezes then reboots while surfind Thursday, September 9, 2004 at 9:31 pm Posted by Sparky (39 messages posted) Temp seems to be fine and steady right before the system locks up. On Tuesday, September 7, 2004 at 9:55 am, mark wrote: >Can you access the BIOS to then find out the cpu temperature? If it's too high(the >cpu temp)that could be causing this. > > > [Reply or follow-up to this message] re: System freezes then reboots while surfind Thursday, September 9, 2004 at 9:33 pm Posted by Sparky (39 messages posted) I usually run McAfee and it is up to date. I did however run BitDefender Free Online Virus Scan just to make sure. Nothing found. On Wednesday, September 8, 2004 at 7:05 am, Cyber Cowboy 009 wrote: > >Hello Sparky,here's a good online scan: BitDefender >Free Online Virus Scan > > > > [Reply or follow-up to this message] re: System freezes then reboots while surfind Thursday, September 9, 2004 at 9:41 pm Posted by Sparky (39 messages posted) I'm working my way through getting or updating then running these but so far nothing really terrible. On Tuesday, September 7, 2004 at 10:05 am, Broni wrote: >Get, and run: >- Spybot >- Ad-Aware >Make sure, you get the latest updates for the two above >- CWShredder(BTN link) >- HijackThis. >Don't fix anything in "HijackThis", just post its log back here. > > > > ********************************* > > > >=========================>> > >Smartercomputing [Reply or follow-up to this message] re: System freezes then reboots while surfind Thursday, September 9, 2004 at 9:43 pm Posted by Sparky (39 messages posted) Ok, I've tried most of the options suggested so far without any solution. If a particular link causes the system to crash, if I visit that same link again, a crash will occur everytime. I'm wondering if there is anything with Netscape 7.2 that might be causing this. On Tuesday, September 7, 2004 at 8:33 am, Sparky wrote: >I have found no particular pattern but while surfing with Netscape 7.2, every now >and then when I click a link, just before the browser shows the new page, the system >just freezes for about 5 seconds then starts booting up. Sometimes, in the course >of an hour, it will do this 5 or 6 times. > >Help!!! [Reply or follow-up to this message] re: System freezes then reboots while surfind Thursday, September 9, 2004 at 10:40 pm Posted by mark (1036 messages posted) Well, then, you should uninstall Netscape and replace it with say, Mozilla Firefox or Opera and see what happens(assuming you don't want to go back to I.E.) On Thursday, September 9, 2004 at 9:43 pm, Sparky wrote: >Ok, I've tried most of the options suggested so far without any solution. > >If a particular link causes the system to crash, if I visit that same link again, >a crash will occur everytime. I'm wondering if there is anything with Netscape 7.2 >that might be causing this. > > > [Reply or follow-up to this message] re: System freezes then reboots while surfind Friday, September 10, 2004 at 5:46 am Posted by Sparky (39 messages posted) I haven't tried surfing with another browser but...my wife who accesses the internet through my pc via a small proxy program can cause my pc to reboot by visiting particular sites. She is running Win98se and Netscape 4.x. So, now what? On Thursday, September 9, 2004 at 10:40 pm, mark wrote: >Well, then, you should uninstall Netscape and replace it with say, Mozilla Firefox >or Opera and see what happens(assuming you don't want to go back to I.E.) > > > [Reply or follow-up to this message] re: System freezes then reboots while surfind Friday, September 10, 2004 at 2:42 pm Posted by Broni (1423 messages posted) After running all of them, make sure to post your HT log here. Please, don't fix anything, using HT. While posting your log, make sure to put a checkmark next to: "Check this box to preserve your spacing...", below. ********************************* =========================>> Smartercomputing On Thursday, September 9, 2004 at 9:41 pm, Sparky wrote: >I'm working my way through getting or updating then running these but so far nothing >really terrible. > > > [Reply or follow-up to this message] re: System freezes then reboots while surfind Saturday, September 11, 2004 at 6:17 pm Posted by Sparky (39 messages posted) Would you believe http://www.softpedia.com/public/cat/10/17/10-17-69.shtml is a site that crashes my system!!! I can't run HT. On Friday, September 10, 2004 at 2:42 pm, Broni wrote: >After running all of them, make sure to post your HT log here. Please, don't fix >anything, using HT. >While posting your log, make sure to put a checkmark next to: "Check this box to >preserve your spacing...", below. > > > > ********************************* > > > >=========================>> > >Smartercomputing [Reply or follow-up to this message] re: System freezes then reboots while surfind Saturday, September 11, 2004 at 7:05 pm Posted by Broni (1423 messages posted) Most likely, you have some crap on your system, which makes your system "allergic" to security related sites. Try to download HT from HERE If you crash again, email me, and I'll will send you a copy of HT. ********************************* =========================>> Smartercomputing On Saturday, September 11, 2004 at 6:17 pm, Sparky wrote: > >Would you believe http://www.softpedia.com/public/cat/10/17/10-17-69.shtml is a site >that crashes my system!!! > >I can't run HT. > > [Reply or follow-up to this message] re: System freezes then reboots while surfind Sunday, September 12, 2004 at 2:29 pm Posted by Sparky (39 messages posted) Finally, Logfile of HijackThis v1.98.2 Scan saved at 4:18:48 PM, on 9/12/04 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\SPOOL32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\PROGRAM FILES\ATGUARD\IAMSERV.EXE C:\WINDOWS\SYSTEM\MSTASK.EXE C:\PROGRAM FILES\ATGUARD\IAMAPP.EXE C:\PROGRAM FILES\WORLDWIDE DIAL SERVICE\WWDS\INSIGHT\ARUPLD32.EXE C:\PROGRAM FILES\WORLDWIDE DIAL SERVICE\WWDS\INSIGHT\ARMON32A.EXE C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\AVSYNMGR.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\EXPLORER.EXE C:\WINDOWS\TASKMON.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\WINDOWS\SYSTEM\HPZTSB03.EXE C:\WINDOWS\SYSTEM\RAS\UPDATE.EXE C:\PROGRAM FILES\B'S CLIP\BSCLIP.EXE C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\ALOGSERV.EXE C:\WINDOWS\SYSTEM\STIMON.EXE C:\WINDOWS\ptsnoop.exe C:\PROGRAM FILES\MOTHERBOARD MONITOR 5\MBM5.EXE C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER FREE EDITION\PSFREE.EXE C:\PROGRAM FILES\NETSCAPE7\NETSCAPE 7\NETSCP.EXE C:\PROGRAM FILES\ANALOGX\PROXY\PROXY.EXE C:\WINDOWS\SYSTEM\WMIEXE.EXE C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\VSSTAT.EXE C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\AVCONSOL.EXE C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\VSHWIN32.EXE C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\WEBSCANX.EXE C:\WINDOWS\SYSTEM\DDHELP.EXE C:\PROGRAM FILES\MIRC\MIRC.EXE C:\PROGRAM FILES\WINZIP\WINZIP32.EXE C:\MY DOCUMENTS\DOWNLOADS\HIJACKTHIS.EXE R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.sbc.com/dsl R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:6711 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1 N1 - Netscape 4: user_pref("browser.startup.homepage", "C:\\Program Files\\Netscape\\Users\\Tim\\bookmark.htm"); (C:\Program Files\Netscape\Users\tim\prefs.js) O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe O4 - HKLM\..\Run: [SystemTray] SysTray.Exe O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\SYSTEM\hpztsb03.exe O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp O4 - HKLM\..\Run: [WWDS] C:\WINDOWS\SYSTEM\RAS\update.exe O4 - HKLM\..\Run: [B'sCLiP] C:\PROGRA~1\B'SCLI~1\BSCLIP.exe O4 - HKLM\..\Run: [CriticalUpdate] C:\WINDOWS\SYSTEM\wucrtupd.exe -startup O4 - HKLM\..\Run: [Alogserv] C:\Program Files\McAfee\McAfee VirusScan\alogserv.exe O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE O4 - HKLM\..\Run: [CountrySelection] pctptt.exe O4 - HKLM\..\Run: [PTSNOOP] ptsnoop.exe O4 - HKLM\..\Run: [MBM 5] "C:\PROGRAM FILES\MOTHERBOARD MONITOR 5\MBM5.EXE" O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe O4 - HKLM\..\RunServices: [AccessRampLAN 01] "C:\PROGRAM FILES\WORLDWIDE DIAL SERVICE\WWDS\INSIGHT\ARUpld32.exe" -l O4 - HKLM\..\RunServices: [AccessRampMonitor 01] "C:\PROGRAM FILES\WORLDWIDE DIAL SERVICE\WWDS\INSIGHT\ARMon32a.exe" O4 - HKLM\..\RunServices: [McAfeeVirusScanService] C:\Program Files\McAfee\McAfee VirusScan\AVSYNMGR.EXE O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER FREE EDITION\PSFREE.EXE" O4 - HKCU\..\Run: [Mozilla Quick Launch] "C:\Program Files\Netscape7\Netscape 7\Netscp.exe" -turbo O4 - Startup: Proxy.lnk = C:\Program Files\AnalogX\Proxy\proxy.exe O4 - Startup: Event Reminder.lnk = C:\Program Files\Broderbund\PrintMaster\PMremind.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE10\EXCEL.EXE/3000 O9 - Extra button: Net2Phone - {4B30061A-5B39-11D3-80F8-0090276F843F} - C:\Program Files\Net2Phone\Net2fone.exe O9 - Extra 'Tools' menuitem: Net2Phone - {4B30061A-5B39-11D3-80F8-0090276F843F} - C:\Program Files\Net2Phone\Net2fone.exe O16 - DPF: Tarantella 3.x Combined Java Archive - https://tta0104.uscc.us-tx.citicorp.com/tarantella/java/ttaA-du.cab O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - C:\Program Files\Yahoo!\common\yinsthelper.dll O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab O17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain = sbcglobal.net On Saturday, September 11, 2004 at 7:05 pm, Broni wrote: >Most likely, you have some crap on your system, which makes your system "allergic" >to security related sites. Try to download HT from HERE >If you crash again, email me, and I'll will send you a copy of HT. > > > > ********************************* > > > >=========================>> > >Smartercomputing [Reply or follow-up to this message] re: System freezes then reboots while surfind Sunday, September 12, 2004 at 2:37 pm Posted by Broni (1423 messages posted) Good, late me take a look... ********************************* =========================>> Smartercomputing On Sunday, September 12, 2004 at 2:29 pm, Sparky wrote: >Finally, > >Logfile of HijackThis v1.98.2 >Scan saved at 4:18:48 PM, on 9/12/04 >Platform: Windows 98 SE (Win9x 4.10.2222A) >MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) > >Running processes: >C:\WINDOWS\SYSTEM\KERNEL32.DLL >C:\WINDOWS\SYSTEM\MSGSRV32.EXE >C:\WINDOWS\SYSTEM\SPOOL32.EXE >C:\WINDOWS\SYSTEM\MPREXE.EXE >C:\PROGRAM FILES\ATGUARD\IAMSERV.EXE >C:\WINDOWS\SYSTEM\MSTASK.EXE >C:\PROGRAM FILES\ATGUARD\IAMAPP.EXE >C:\PROGRAM FILES\WORLDWIDE DIAL SERVICE\WWDS\INSIGHT\ARUPLD32.EXE >C:\PROGRAM FILES\WORLDWIDE DIAL SERVICE\WWDS\INSIGHT\ARMON32A.EXE >C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\AVSYNMGR.EXE >C:\WINDOWS\SYSTEM\mmtask.tsk >C:\WINDOWS\EXPLORER.EXE >C:\WINDOWS\TASKMON.EXE >C:\WINDOWS\SYSTEM\SYSTRAY.EXE >C:\WINDOWS\SYSTEM\HPZTSB03.EXE >C:\WINDOWS\SYSTEM\RAS\UPDATE.EXE >C:\PROGRAM FILES\B'S CLIP\BSCLIP.EXE >C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\ALOGSERV.EXE >C:\WINDOWS\SYSTEM\STIMON.EXE >C:\WINDOWS\ptsnoop.exe >C:\PROGRAM FILES\MOTHERBOARD MONITOR 5\MBM5.EXE >C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER FREE EDITION\PSFREE.EXE >C:\PROGRAM FILES\NETSCAPE7\NETSCAPE 7\NETSCP.EXE >C:\PROGRAM FILES\ANALOGX\PROXY\PROXY.EXE >C:\WINDOWS\SYSTEM\WMIEXE.EXE >C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\VSSTAT.EXE >C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\AVCONSOL.EXE >C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\VSHWIN32.EXE >C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\WEBSCANX.EXE >C:\WINDOWS\SYSTEM\DDHELP.EXE >C:\PROGRAM FILES\MIRC\MIRC.EXE >C:\PROGRAM FILES\WINZIP\WINZIP32.EXE >C:\MY DOCUMENTS\DOWNLOADS\HIJACKTHIS.EXE > >R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.sbc.com/dsl >R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer >= http=127.0.0.1:6711 >R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride >= 127.0.0.1 >N1 - Netscape 4: user_pref("browser.startup.homepage", "C:\\Program Files\\Netscape\\Users\\Tim\\bookmark.htm"); >(C:\Program Files\Netscape\Users\tim\prefs.js) >O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX >O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun >O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe >O4 - HKLM\..\Run: [SystemTray] SysTray.Exe >O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme >O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\SYSTEM\hpztsb03.exe >O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp >O4 - HKLM\..\Run: [WWDS] C:\WINDOWS\SYSTEM\RAS\update.exe >O4 - HKLM\..\Run: [B'sCLiP] C:\PROGRA~1\B'SCLI~1\BSCLIP.exe >O4 - HKLM\..\Run: [CriticalUpdate] C:\WINDOWS\SYSTEM\wucrtupd.exe -startup >O4 - HKLM\..\Run: [Alogserv] C:\Program Files\McAfee\McAfee VirusScan\alogserv.exe >O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE >O4 - HKLM\..\Run: [CountrySelection] pctptt.exe >O4 - HKLM\..\Run: [PTSNOOP] ptsnoop.exe >O4 - HKLM\..\Run: [MBM 5] "C:\PROGRAM FILES\MOTHERBOARD MONITOR 5\MBM5.EXE" >O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe >O4 - HKLM\..\RunServices: [AccessRampLAN 01] "C:\PROGRAM FILES\WORLDWIDE DIAL SERVICE\WWDS\INSIGHT\ARUpld32.exe" >-l >O4 - HKLM\..\RunServices: [AccessRampMonitor 01] "C:\PROGRAM FILES\WORLDWIDE DIAL >SERVICE\WWDS\INSIGHT\ARMon32a.exe" >O4 - HKLM\..\RunServices: [McAfeeVirusScanService] C:\Program Files\McAfee\McAfee >VirusScan\AVSYNMGR.EXE >O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER >FREE EDITION\PSFREE.EXE" >O4 - HKCU\..\Run: [Mozilla Quick Launch] "C:\Program Files\Netscape7\Netscape 7\Netscp.exe" >-turbo >O4 - Startup: Proxy.lnk = C:\Program Files\AnalogX\Proxy\proxy.exe >O4 - Startup: Event Reminder.lnk = C:\Program Files\Broderbund\PrintMaster\PMremind.exe >O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE10\EXCEL.EXE/3000 >O9 - Extra button: Net2Phone - {4B30061A-5B39-11D3-80F8-0090276F843F} - C:\Program >Files\Net2Phone\Net2fone.exe >O9 - Extra 'Tools' menuitem: Net2Phone - {4B30061A-5B39-11D3-80F8-0090276F843F} - >C:\Program Files\Net2Phone\Net2fone.exe >O16 - DPF: Tarantella 3.x Combined Java Archive - https://tta0104.uscc.us-tx.citicorp.com/tarantella/java/ttaA-du.cab >O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - C:\Program Files\Yahoo!\common\yinsthelper.dll >O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab >O17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain = sbcglobal.net > > > > > [Reply or follow-up to this message] re: System freezes then reboots while surfind Sunday, September 12, 2004 at 2:38 pm Posted by Broni (1423 messages posted) I'll go item, by item, not by importance. It's easier for me, and it's easier for you to find it in your log. O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme Power Management is a faulty feature in Win 98, so it's not recommended to use it. There are TWO indetical "LoadPowerProfile" entries in "msconfig/startup". Uncheck them both. O4 - HKLM\..\Run: [WWDS] C:\WINDOWS\SYSTEM\RAS\update.exe I'm not sure about this one. Locate "update.exe" file on your computer, right click on it, then go "Preferences". See, what it says. Hopefully, it's M$ update file. O4 - HKLM\..\Run: [B'sCLiP] C:\PROGRA~1\B'SCLI~1\BSCLIP.exe Not needed at startup (means, should be unchecked in "msonfig/startup"). CD recording utility that comes with a lot of CDR/CDRW drives and isn't required O4 - HKLM\..\Run: [CriticalUpdate] C:\WINDOWS\SYSTEM\wucrtupd.exe -startup MS Windows Critical Update Notification. I don't like things lurking through my computer, without my knowledge. Some M$ updates are not needed, some are faulty, so you rather go to Windows Update site, and pick by yourself what you want to install. O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE Your choice. Stimon.exe enables a USB still-image device (such as a scanner) to initiate data transfer to a program. For example, if your scanning device has a scan button, it may start a program and begin scanning when you press it. Create a shortcut and start it manually when needed if your scanner otherwise fails to scan. May be required for your USB scanner to work - including all HP scanners and some of their SCSI scanners O4 - HKLM\..\Run: [CountrySelection] pctptt.exe Country selection for a PCtel HSP56 based modem. Often found in OEM (Dell,Compaq, HP, etc) systems for their modems included on the motherboard or as a separate card. Once you've set the modem up to the chosen country it's not required in startup. O4 - HKLM\..\Run: [PTSNOOP] ptsnoop.exe You have to investigate on this one a little. Multiple choices: These descriptions I've come across - all valid as far as I can see :- (1) Program installed with some modems that monitors the COM ports for the modem driver. Not required from what I've read - may need a registry edit to get rid of it (2) Backdoor trojan virus that copies itself as PTSNOOP.EXE -see HERE for more info (3) Apparently the people who put it out claim it's a driver for a Voice modems (don't know who they are though - Ed) Note: If using AOL and you disable this you may lose your connection or lock up (4) Can also be an older Logitech scanner program. Remove from the Win.ini tab under Load='path'PTSNOOP and the System.ini tab under drivers='path'ptrtkr.drb. Can cause parallel port conflicts big time dragging system resources way down when a conflict exists (5) Allows audio monitoring of modem phone dialling tones and can be useful if you have connection problems (6) Karen Kenworthy's Snooper - "logs the start and stop time of all programs run under Windows" O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe MS Scheduling Agent displayed as a box with a stopwatch in the System Tray that is only needed if you have regular scheduled disk defragmenting, ScanDisk, etc. O4 - HKLM\..\RunServices: [AccessRampLAN 01] "C:\PROGRAM FILES\WORLDWIDE DIAL SERVICE\WWDS\INSIGHT\ARUpld32.exe" -l O4 - HKLM\..\RunServices: [AccessRampMonitor 01] "C:\PROGRAM FILES\WORLDWIDE DIAL SERVICE\WWDS\INSIGHT\ARMon32a.exe" and now I just found out about: O4 - HKLM\..\Run: [WWDS] C:\WINDOWS\SYSTEM\RAS\update.exe all belong to a same AdRoar adware. Fix them all. The key in turning it off is a file named ARUCfg32.exe. This file (ARUCfg32.exe) does not show up in the startup process. If you have this file, you can execute it and remove all the monitoring activities it does. Removing all the checks in all the boxes (both tabs) still calls ARUpld32.exe to start when you start the dial up. You can block it from sending info if you have Zone Alarm installed. Renaming the extension of ARUCfg32.exe to ARUCfg32.exe1 works. The ARUpld32.exe is not loaded when launching the dial up client. Written by IP Insight and also included with Earthlink Total Access 2003 O4 - Startup: Proxy.lnk = C:\Program Files\AnalogX\Proxy\O4 - Startup: Proxy.lnk = C:\Program Files\AnalogX\Proxy\proxy.exe I don't like this entry. Go to that directory, right click on "proxy.exe", then "Properties", and see what it says. O4 - Startup: Event Reminder.lnk = C:\Program Files\Broderbund\PrintMaster\PMremind.exe A calendar/alarm program that installs with Brøderbund Printmaster. Not needed at startup, unless you use it all the time. O16 - DPF: Tarantella 3.x Combined Java Archive - https://tta0104.uscc.us-tx.citicorp.com/tarantella/java/ttaA-du.cab If you know this site, it's OK, if you don't, fix it. ********************************* =========================>> Smartercomputing On Sunday, September 12, 2004 at 2:29 pm, Sparky wrote: >Finally, > >Logfile of HijackThis v1.98.2 >Scan saved at 4:18:48 PM, on 9/12/04 >Platform: Windows 98 SE (Win9x 4.10.2222A) >MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) > >Running processes: >C:\WINDOWS\SYSTEM\KERNEL32.DLL >C:\WINDOWS\SYSTEM\MSGSRV32.EXE >C:\WINDOWS\SYSTEM\SPOOL32.EXE >C:\WINDOWS\SYSTEM\MPREXE.EXE >C:\PROGRAM FILES\ATGUARD\IAMSERV.EXE >C:\WINDOWS\SYSTEM\MSTASK.EXE >C:\PROGRAM FILES\ATGUARD\IAMAPP.EXE >C:\PROGRAM FILES\WORLDWIDE DIAL SERVICE\WWDS\INSIGHT\ARUPLD32.EXE >C:\PROGRAM FILES\WORLDWIDE DIAL SERVICE\WWDS\INSIGHT\ARMON32A.EXE >C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\AVSYNMGR.EXE >C:\WINDOWS\SYSTEM\mmtask.tsk >C:\WINDOWS\EXPLORER.EXE >C:\WINDOWS\TASKMON.EXE >C:\WINDOWS\SYSTEM\SYSTRAY.EXE >C:\WINDOWS\SYSTEM\HPZTSB03.EXE >C:\WINDOWS\SYSTEM\RAS\UPDATE.EXE >C:\PROGRAM FILES\B'S CLIP\BSCLIP.EXE >C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\ALOGSERV.EXE >C:\WINDOWS\SYSTEM\STIMON.EXE >C:\WINDOWS\ptsnoop.exe >C:\PROGRAM FILES\MOTHERBOARD MONITOR 5\MBM5.EXE >C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER FREE EDITION\PSFREE.EXE >C:\PROGRAM FILES\NETSCAPE7\NETSCAPE 7\NETSCP.EXE >C:\PROGRAM FILES\ANALOGX\PROXY\PROXY.EXE >C:\WINDOWS\SYSTEM\WMIEXE.EXE >C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\VSSTAT.EXE >C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\AVCONSOL.EXE >C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\VSHWIN32.EXE >C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\WEBSCANX.EXE >C:\WINDOWS\SYSTEM\DDHELP.EXE >C:\PROGRAM FILES\MIRC\MIRC.EXE >C:\PROGRAM FILES\WINZIP\WINZIP32.EXE >C:\MY DOCUMENTS\DOWNLOADS\HIJACKTHIS.EXE > >R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.sbc.com/dsl >R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer >= http=127.0.0.1:6711 >R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride >= 127.0.0.1 >N1 - Netscape 4: user_pref("browser.startup.homepage", "C:\\Program Files\\Netscape\\Users\\Tim\\bookmark.htm"); >(C:\Program Files\Netscape\Users\tim\prefs.js) >O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX >O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun >O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe >O4 - HKLM\..\Run: [SystemTray] SysTray.Exe >O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme >O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\SYSTEM\hpztsb03.exe >O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp >O4 - HKLM\..\Run: [WWDS] C:\WINDOWS\SYSTEM\RAS\update.exe >O4 - HKLM\..\Run: [B'sCLiP] C:\PROGRA~1\B'SCLI~1\BSCLIP.exe >O4 - HKLM\..\Run: [CriticalUpdate] C:\WINDOWS\SYSTEM\wucrtupd.exe -startup >O4 - HKLM\..\Run: [Alogserv] C:\Program Files\McAfee\McAfee VirusScan\alogserv.exe >O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE >O4 - HKLM\..\Run: [CountrySelection] pctptt.exe >O4 - HKLM\..\Run: [PTSNOOP] ptsnoop.exe >O4 - HKLM\..\Run: [MBM 5] "C:\PROGRAM FILES\MOTHERBOARD MONITOR 5\MBM5.EXE" >O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe >O4 - HKLM\..\RunServices: [AccessRampLAN 01] "C:\PROGRAM FILES\WORLDWIDE DIAL SERVICE\WWDS\INSIGHT\ARUpld32.exe" >-l >O4 - HKLM\..\RunServices: [AccessRampMonitor 01] "C:\PROGRAM FILES\WORLDWIDE DIAL >SERVICE\WWDS\INSIGHT\ARMon32a.exe" >O4 - HKLM\..\RunServices: [McAfeeVirusScanService] C:\Program Files\McAfee\McAfee >VirusScan\AVSYNMGR.EXE >O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER >FREE EDITION\PSFREE.EXE" >O4 - HKCU\..\Run: [Mozilla Quick Launch] "C:\Program Files\Netscape7\Netscape 7\Netscp.exe" >-turbo >O4 - Startup: Proxy.lnk = C:\Program Files\AnalogX\Proxy\proxy.exe >O4 - Startup: Event Reminder.lnk = C:\Program Files\Broderbund\PrintMaster\PMremind.exe >O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE10\EXCEL.EXE/3000 >O9 - Extra button: Net2Phone - {4B30061A-5B39-11D3-80F8-0090276F843F} - C:\Program >Files\Net2Phone\Net2fone.exe >O9 - Extra 'Tools' menuitem: Net2Phone - {4B30061A-5B39-11D3-80F8-0090276F843F} - >C:\Program Files\Net2Phone\Net2fone.exe >O16 - DPF: Tarantella 3.x Combined Java Archive - https://tta0104.uscc.us-tx.citicorp.com/tarantella/java/ttaA-du.cab >O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - C:\Program Files\Yahoo!\common\yinsthelper.dll >O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab >O17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain = sbcglobal.net > > > > > [Reply or follow-up to this message] re: System freezes then reboots while surfind Sunday, September 12, 2004 at 5:01 pm Posted by Sparky (39 messages posted) Awesome, I've just quickly gone through this list and I see there is a lot I need to do. As I get time, I'll fix these things and let you know how it turns out! Thanks again and again!!!!! On Sunday, September 12, 2004 at 2:38 pm, Broni wrote: >I'll go item, by item, not by importance. It's easier for me, and it's easier for >you to find it in your log. > >O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme >Power Management is a faulty feature in Win 98, so it's not recommended to use it. >There are TWO indetical "LoadPowerProfile" entries in "msconfig/startup". Uncheck >them both. > >O4 - HKLM\..\Run: [WWDS] C:\WINDOWS\SYSTEM\RAS\update.exe >I'm not sure about this one. Locate "update.exe" file on your computer, right click >on it, then go "Preferences". See, what it says. Hopefully, it's M$ update file. > >O4 - HKLM\..\Run: [B'sCLiP] C:\PROGRA~1\B'SCLI~1\BSCLIP.exe >Not needed at startup (means, should be unchecked in "msonfig/startup"). CD recording >utility that comes with a lot of CDR/CDRW drives and isn't required > >O4 - HKLM\..\Run: [CriticalUpdate] C:\WINDOWS\SYSTEM\wucrtupd.exe -startup >MS Windows Critical Update Notification. I don't like things lurking through my computer, >without my knowledge. Some M$ updates are not needed, some are faulty, so you rather >go to Windows Update site, and pick by yourself what you want to install. > >O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE >Your choice. Stimon.exe enables a USB still-image device (such as a scanner) to initiate >data transfer to a program. For example, if your scanning device has a scan button, >it may start a program and begin scanning when you press it. Create a shortcut and >start it manually when needed if your scanner otherwise fails to scan. May be required >for your USB scanner to work - including all HP scanners and some of their SCSI scanners > >O4 - HKLM\..\Run: [CountrySelection] pctptt.exe >Country selection for a PCtel HSP56 based modem. Often found in OEM (Dell,Compaq, >HP, etc) systems for their modems included on the motherboard or as a separate card. >Once you've set the modem up to the chosen country it's not required in startup. > >O4 - HKLM\..\Run: [PTSNOOP] ptsnoop.exe >You have to investigate on this one a little. Multiple choices: >These descriptions I've come across - all valid as far as I can see :- >(1) Program installed with some modems that monitors the COM ports for the modem >driver. Not required from what I've read - may need a registry edit to get rid of >it >(2) Backdoor trojan virus that copies itself as PTSNOOP.EXE -see HERE >for more info >(3) Apparently the people who put it out claim it's a driver for a Voice modems (don't >know who they are though - Ed) >Note: If using AOL and you disable this you may lose your connection or lock up >(4) Can also be an older Logitech scanner program. Remove from the Win.ini tab under >Load='path'PTSNOOP and the System.ini tab under drivers='path'ptrtkr.drb. Can cause >parallel port conflicts big time dragging system resources way down when a conflict >exists >(5) Allows audio monitoring of modem phone dialling tones and can be useful if you >have connection problems >(6) Karen Kenworthy's Snooper - "logs the start and stop time of all programs run >under Windows" > >O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe >MS Scheduling Agent displayed as a box with a stopwatch in the System Tray that is >only needed if you have regular scheduled disk defragmenting, ScanDisk, etc. > >O4 - HKLM\..\RunServices: [AccessRampLAN 01] "C:\PROGRAM FILES\WORLDWIDE >DIAL SERVICE\WWDS\INSIGHT\ARUpld32.exe" >-l >O4 - HKLM\..\RunServices: [AccessRampMonitor 01] "C:\PROGRAM FILES\WORLDWIDE DIAL >SERVICE\WWDS\INSIGHT\ARMon32a.exe" >and now I just found out about: >O4 - HKLM\..\Run: [WWDS] C:\WINDOWS\SYSTEM\RAS\update.exe >all belong to a same AdRoar adware. Fix them all. >The key in turning it off is a file named ARUCfg32.exe. This file (ARUCfg32.exe) >does not show up in the startup process. If you have this file, you can execute it >and remove all the monitoring activities it does. Removing all the checks in all >the boxes (both tabs) still calls ARUpld32.exe to start when you start the dial up. >You can block it from sending info if you have Zone Alarm installed. Renaming the >extension of ARUCfg32.exe to ARUCfg32.exe1 works. The ARUpld32.exe is not loaded >when launching the dial up client. Written by IP Insight and also included with Earthlink >Total Access 2003 > > >O4 - Startup: Proxy.lnk = C:\Program Files\AnalogX\Proxy\O4 - Startup: Proxy.lnk >= C:\Program Files\AnalogX\Proxy\proxy.exe >I don't like this entry. Go to that directory, right click on "proxy.exe", then "Properties", >and see what it says. > >O4 - Startup: Event Reminder.lnk = C:\Program Files\Broderbund\PrintMaster\PMremind.exe >A calendar/alarm program that installs with Brøderbund Printmaster. Not needed at >startup, unless you use it all the time. > >O16 - DPF: Tarantella 3.x Combined Java Archive - https://tta0104.uscc.us-tx.citicorp.com/tarantella/java/ttaA-du.cab >If you know this site, it's OK, if you don't, fix it. > > > > > > > > > ********************************* > > > >=========================>> > >Smartercomputing [Reply or follow-up to this message] re: System freezes then reboots while surfind Sunday, September 12, 2004 at 5:11 pm Posted by Broni (1423 messages posted) You are welcome. The most important entries are those in red. ********************************* =========================>> Smartercomputing On Sunday, September 12, 2004 at 5:01 pm, Sparky wrote: >Awesome, I've just quickly gone through this list and I see there is a lot I need >to do. As I get time, I'll fix these things and let you know how it turns out! >Thanks again and again!!!!! > > > [Reply or follow-up to this message] re: System freezes then reboots while surfind Monday, September 13, 2004 at 5:06 pm Posted by Sparky (39 messages posted) Still having the problem, visiting www.google.com using either Netscape or IE will do it as will going to google on the other computer running through the proxy on this computer. Here is the lastest log with some notes at the end: Logfile of HijackThis v1.98.2 Scan saved at 6:42:52 PM, on 9/13/04 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\PROGRAM FILES\ATGUARD\IAMSERV.EXE C:\PROGRAM FILES\ATGUARD\IAMAPP.EXE C:\WINDOWS\SYSTEM\MSTASK.EXE C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\AVSYNMGR.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\EXPLORER.EXE C:\WINDOWS\TASKMON.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\WINDOWS\SYSTEM\HPZTSB03.EXE C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\ALOGSERV.EXE C:\PROGRAM FILES\ANALOGX\PROXY\PROXY.EXE C:\WINDOWS\SYSTEM\SPOOL32.EXE C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\VSSTAT.EXE C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\VSHWIN32.EXE C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\AVCONSOL.EXE C:\WINDOWS\SYSTEM\WMIEXE.EXE C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\WEBSCANX.EXE C:\MY DOCUMENTS\HIJACKTHIS.EXE R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.sbc.com/dsl R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:6711 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1 N1 - Netscape 4: user_pref("browser.startup.homepage", "C:\\Program Files\\Netscape\\Users\\Tim\\bookmark.htm"); (C:\Program Files\Netscape\Users\tim\prefs.js) O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe O4 - HKLM\..\Run: [SystemTray] SysTray.Exe O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\SYSTEM\hpztsb03.exe O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp O4 - HKLM\..\Run: [CriticalUpdate] C:\WINDOWS\SYSTEM\wucrtupd.exe -startup O4 - HKLM\..\Run: [Alogserv] C:\Program Files\McAfee\McAfee VirusScan\alogserv.exe O4 - HKLM\..\Run: [CountrySelection] pctptt.exe O4 - HKLM\..\Run: [PTSNOOP] ptsnoop.exe O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe O4 - HKLM\..\RunServices: [McAfeeVirusScanService] C:\Program Files\McAfee\McAfee VirusScan\AVSYNMGR.EXE O4 - Startup: Proxy.lnk = C:\Program Files\AnalogX\Proxy\proxy.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE10\EXCEL.EXE/3000 O9 - Extra button: Net2Phone - {4B30061A-5B39-11D3-80F8-0090276F843F} - C:\Program Files\Net2Phone\Net2fone.exe O9 - Extra 'Tools' menuitem: Net2Phone - {4B30061A-5B39-11D3-80F8-0090276F843F} - C:\Program Files\Net2Phone\Net2fone.exe O16 - DPF: Tarantella 3.x Combined Java Archive - https://tta0104.uscc.us-tx.citicorp.com/tarantella/java/ttaA-du.cab O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - C:\Program Files\Yahoo!\common\yinsthelper.dll O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab O17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain = sbcglobal.net ***** NOTES ***** I unchecked both of these but they came back upon reboot: O4 - HKLM\..\Run: [CountrySelection] pctptt.exe O4 - HKLM\..\Run: [PTSNOOP] ptsnoop.exe Did not uncheck this as I have it running in notify only mode O4 - HKLM\..\Run: [CriticalUpdate] C:\WINDOWS\SYSTEM\wucrtupd.exe -startup I use this to schedule a couple of things so left it in O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe This is a small proxy I run for the our other computer to access the internet O4 - Startup: Proxy.lnk = C:\Program Files\AnalogX\Proxy\proxy.exe Work related O16 - DPF: Tarantella 3.x Combined Java Archive - https://tta0104.uscc.us-tx.citicorp.com/tarantella/java/ttaA-du.cab On Sunday, September 12, 2004 at 5:11 pm, Broni wrote: >You are welcome. The most important entries are those in red. > > > > ********************************* > > > >=========================>> > >Smartercomputing [Reply or follow-up to this message] re: System freezes then reboots while surfind Monday, September 13, 2004 at 5:23 pm Posted by Sparky (39 messages posted) One other thing, I just realized I never got "CWShredder(BTN link)". When I try to visit that site also, *reboot*! Argh!!! On Tuesday, September 7, 2004 at 10:05 am, Broni wrote: >Get, and run: >- Spybot >- Ad-Aware >Make sure, you get the latest updates for the two above >- CWShredder(BTN link) >- HijackThis. >Don't fix anything in "HijackThis", just post its log back here. > > > > ********************************* > > > >=========================>> > >Smartercomputing [Reply or follow-up to this message] re: System freezes then reboots while surfind Monday, September 13, 2004 at 5:48 pm Posted by Ms. Eagle (33640 messages posted) There are too many well-meaning posters, who shouldn't be offering advice on HJT logs. I don't know why a HJT log was requested in the first place. I doubt malware is the reason for your freezing problem. Your initial log showed no malware problems. You should create a seperate folder for HijackThis.exe, ex: C:\HJT\. Keep it on hand, but you don't need it to fix anything at present. Your rebooting and freezing problem is more likely a hardware issue, including memory problems. Open the case and make sure your fans are working properly, blow out the dust and so on. If you're not experienced with messing around inside, get a knowledgeable friend or aquaintenance. You could also run a free Memory diagnostic. A couple corrections to the previous advice you got: Firstly, there's nothing wrong with AnalogX Proxy server. You don't need to get rid of it, because someone, who doesn't know any better, hasn't a clue. Bad advice. Leave this alone! It's modem related software: O4 - HKLM\..\Run: [CountrySelection] pctptt.exe Do not simply uncheck Load Power Profiles in MSCONFIG. Instead you need to disable APM the correct way, and that isn't it. TaskMonitor can be disabled in MSCONFIG. I suggest removing this ActiveX Control. Any and all of those can be safely removed and will be downloaded again as needed: O16 - DPF: Tarantella 3.x Combined Java Archive - https://tta0104.uscc.us-tx.citicorp.com/tarantella/java/ttaA-du.cab Strongly recommended to uninstall Windows Update Critical Update Notification in Add/Remove. Win98 is an older OS anyway, only an occassional IE or OE update. Look for Wuauboot and Wucrtupd here: Answers that Work Tasklist You should rid yourself of Ptsnoop completely. There are many conflicting opinions on it, BTW. It's unlikely that it's the trojan, but there's still the possibility. Having it installed leaves a port wide open for trojans. It can be safely removed. That's according to a very reliable source. "Ptsnoop.exe is a program installed with some modems that monitors the COM ports for the modem driver. It's not actually necessary for using your modem." Open the Win.ini file, location: C:\WINDOWS\WIN.INI in Notepad or Start - Run - type: Sysedit. OK. In Win.ini, locate and delete the reference to Ptsnoop in either the LOAD= or RUN= lines at the top of the file, and save the changes. (Leave the LOAD= and RUN= references.)" Backdoor.Ptsnoop [Reply or follow-up to this message] re: System freezes then reboots while surfind Monday, September 13, 2004 at 5:57 pm Posted by Broni (1423 messages posted) I'm not sure, what is your problem with me, so maybe you can tell me. Maybe, you should read my HT log reading of that person better, and then make comments. I assume, that you consider yourself the only person, who can read HT logs correctly, but from what you just posted, I'm affraid, you may do more damage to people's computers, then good. Let me go through your post.... "Your initial log showed no malware problems." Unless you are color blind, please, read RED entry in my log reading. Yes IT IS malware. "Your rebooting and freezing problem is more likely a hardware issue, including memory problems." I doubt, since it happens only when visiting certain web sites. If it was hardware problem, he would have a problem with his computer, in general, not only surfing the net. "Firstly, there's nothing wrong with AnalogX Proxy server. You don't need to get rid of it, because someone, who doesn't know any better, hasn't a clue. Bad advice." Again, read my answer carefuly. I didn't adviced him to get rid of it. All, I said was to right click on "proxy.exe", and check its properties. "Leave this alone! It's modem related software: O4 - HKLM\..\Run: [CountrySelection] pctptt.exe" Wrong again. Once, modem has been set up, it's not needed at startup. "Do not simply uncheck Load Power Profiles in MSCONFIG. Instead you need to disable APM the correct way, and that isn't it." Wrong again. When you uncheck both entries in "msconfig/startup", it doesn't matter what settings are in Start>Control Panel>Power Management. It WON'T start. "TaskMonitor can be disabled in MSCONFIG." He said, he needs it. I said, it MAY be disabled, if not needed. "I suggest removing this ActiveX Control. Any and all of those can be safely removed and will be downloaded again as needed: O16 - DPF: Tarantella 3.x Combined Java Archive - https://tta0104.uscc.us-tx.citicorp.com/tarantella/java/ttaA-du.cab" He said, it's work related, and he needs it, or we have some reading problems, again? "Strongly recommended to uninstall Windows Update Critical Update Notification in Add/Remove." Why "strongly recommended"? By whom? If he runs it in only notification mode, what's wrong with it? It won't install anything automatically. "You should rid yourself of Ptsnoop completely." Surely, he shouldn't right away. There are several options for what it is, as I posted, and he, me, or you won't know before he investigates his computer, because there is no ONE simple answer. Now, please, get off of me, and spend some time doing positive things, instead of accusing me of some kind of insanity. ********************************* =========================>> Smartercomputing On Monday, September 13, 2004 at 5:48 pm, Carol J wrote: > > >There are too many well-meaning posters, who shouldn't be offering advice on HJT >logs. I don't know why a HJT log was requested in the first place. I doubt malware >is the reason for your freezing problem. Your initial log showed no malware problems. >You should create a seperate folder for HijackThis.exe, ex: C:\HJT\. Keep it on hand, >but you don't need it to fix anything at present. Your rebooting and freezing problem is more likely a hardware issue, including memory >problems. Open the case and make sure your fans are working properly, blow out the >dust and so on. If you're not experienced with messing around inside, get a knowledgeable >friend or aquaintenance. You could also run a free Memory diagnostic. A couple corrections to the previous advice you got: >Firstly, there's nothing wrong with AnalogX Proxy server. You don't need to get >rid of it, because someone, who doesn't know any better, hasn't a clue. Bad advice.Leave this alone! It's modem related software: O4 - HKLM\..\Run: [CountrySelection] >pctptt.exeDo not simply uncheck Load Power Profiles in MSCONFIG. Instead you need to disable >APM the correct way, and that isn't it. TaskMonitor can be disabled in MSCONFIG. I suggest removing this ActiveX Control. Any and all of those can be safely removed >and will be downloaded again as needed:O16 - DPF: Tarantella 3.x Combined Java Archive - https://tta0104.uscc.us-tx.citicorp.com/tarantella/java/ttaA-du.cabStrongly recommended to uninstall Windows Update Critical Update Notification in >Add/Remove. Win98 is an older OS anyway, only an occassional IE or OE update. Look >for Wuauboot and Wucrtupd here: >color="CC00FF"> >Answers that Work TasklistYou should rid yourself of Ptsnoop completely. There are many conflicting opinions >on it, BTW. It's unlikely that it's the trojan, but there's still the possibility. >Having it installed leaves a port wide open for trojans. It can be safely removed. >That's according to a very reliable source. "Ptsnoop.exe is a program installed with some modems that monitors the COM ports >for the modem driver. It's not actually necessary for using your modem." Open the >Win.ini file, location: C:\WINDOWS\WIN.INI in Notepad or Start - Run - type: Sysedit. >OK. In Win.ini, locate and delete the reference to Ptsnoop in either the LOAD= or >RUN= lines at the top of the file, and save the changes. (Leave the LOAD= and RUN= >references.)" > >color="CC00FF"> >Backdoor.Ptsnoop [Reply or follow-up to this message] re: System freezes then reboots while surfind Monday, September 13, 2004 at 6:06 pm Posted by Sparky (39 messages posted) See comments below: On Monday, September 13, 2004 at 5:48 pm, Carol J wrote: > >... >but you don't need it to fix anything at present. Your rebooting and freezing problem is more likely a hardware issue, including memory >problems. Open the case and make sure your fans are working properly, blow out the Hardware problem that only happens when I visit a particular web sites? I've seen some strange things, but... >... >for the modem driver. It's not actually necessary for using your modem." Open the >Win.ini file, location: C:\WINDOWS\WIN.INI in Notepad or Start - Run - type: Sysedit. >OK. In Win.ini, locate and delete the reference to Ptsnoop in either the LOAD= or Found no reference to Ptsnoop in either win.ini or system.ini [Reply or follow-up to this message] re: System freezes then reboots while surfind Monday, September 13, 2004 at 6:31 pm Posted by Broni (1423 messages posted) Sparky I'm sorry for a delay, but I had to reply to Carol in your very thread, and it took me a while. "O4 - HKLM\..\Run: [CountrySelection] pctptt.exe" Let's not worry about this one for now, maybe it can be disabled somewhere in your modem settings, but it's not a big deal. Nothing dangerous, just unnecessary startup. "O4 - HKLM\..\Run: [PTSNOOP] ptsnoop.exe" This has to investigated farther. I gave you several options about this entry. Let me know, which ones you did check. Besides that, your case is getting puzzling. Let's eliminate couple more options. 1. Since you, and your wife are on two machines network, Iwould like you to run very same programs on her computer. 2. Since not able to download CWShredder, I'm sending you a copy of it. Check your mail. ********************************* =========================>> Smartercomputing On Monday, September 13, 2004 at 5:06 pm, Sparky wrote: >Still having the problem, visiting www.google.com using either Netscape or IE will >do it as will going to google on the other computer running through the proxy on >this computer. > >Here is the lastest log with some notes at the end: > >Logfile of HijackThis v1.98.2 >Scan saved at 6:42:52 PM, on 9/13/04 >Platform: Windows 98 SE (Win9x 4.10.2222A) >MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) > >Running processes: >C:\WINDOWS\SYSTEM\KERNEL32.DLL >C:\WINDOWS\SYSTEM\MSGSRV32.EXE >C:\WINDOWS\SYSTEM\MPREXE.EXE >C:\PROGRAM FILES\ATGUARD\IAMSERV.EXE >C:\PROGRAM FILES\ATGUARD\IAMAPP.EXE >C:\WINDOWS\SYSTEM\MSTASK.EXE >C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\AVSYNMGR.EXE >C:\WINDOWS\SYSTEM\mmtask.tsk >C:\WINDOWS\EXPLORER.EXE >C:\WINDOWS\TASKMON.EXE >C:\WINDOWS\SYSTEM\SYSTRAY.EXE >C:\WINDOWS\SYSTEM\HPZTSB03.EXE >C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\ALOGSERV.EXE >C:\PROGRAM FILES\ANALOGX\PROXY\PROXY.EXE >C:\WINDOWS\SYSTEM\SPOOL32.EXE >C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\VSSTAT.EXE >C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\VSHWIN32.EXE >C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\AVCONSOL.EXE >C:\WINDOWS\SYSTEM\WMIEXE.EXE >C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\WEBSCANX.EXE >C:\MY DOCUMENTS\HIJACKTHIS.EXE > >R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.sbc.com/dsl >R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer >= http=127.0.0.1:6711 >R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride >= 127.0.0.1 >N1 - Netscape 4: user_pref("browser.startup.homepage", "C:\\Program Files\\Netscape\\Users\\Tim\\bookmark.htm"); >(C:\Program Files\Netscape\Users\tim\prefs.js) >O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX >O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun >O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe >O4 - HKLM\..\Run: [SystemTray] SysTray.Exe >O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\SYSTEM\hpztsb03.exe >O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp >O4 - HKLM\..\Run: [CriticalUpdate] C:\WINDOWS\SYSTEM\wucrtupd.exe -startup >O4 - HKLM\..\Run: [Alogserv] C:\Program Files\McAfee\McAfee VirusScan\alogserv.exe >O4 - HKLM\..\Run: [CountrySelection] pctptt.exe >O4 - HKLM\..\Run: [PTSNOOP] ptsnoop.exe >O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe >O4 - HKLM\..\RunServices: [McAfeeVirusScanService] C:\Program Files\McAfee\McAfee >VirusScan\AVSYNMGR.EXE >O4 - Startup: Proxy.lnk = C:\Program Files\AnalogX\Proxy\proxy.exe >O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE10\EXCEL.EXE/3000 >O9 - Extra button: Net2Phone - {4B30061A-5B39-11D3-80F8-0090276F843F} - C:\Program >Files\Net2Phone\Net2fone.exe >O9 - Extra 'Tools' menuitem: Net2Phone - {4B30061A-5B39-11D3-80F8-0090276F843F} - >C:\Program Files\Net2Phone\Net2fone.exe >O16 - DPF: Tarantella 3.x Combined Java Archive - https://tta0104.uscc.us-tx.citicorp.com/tarantella/java/ttaA-du.cab >O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - C:\Program Files\Yahoo!\common\yinsthelper.dll >O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab >O17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain = sbcglobal.net > >***** NOTES ***** > >I unchecked both of these but they came back upon reboot: >O4 - HKLM\..\Run: [CountrySelection] pctptt.exe >O4 - HKLM\..\Run: [PTSNOOP] ptsnoop.exe > >Did not uncheck this as I have it running in notify only mode >O4 - HKLM\..\Run: [CriticalUpdate] C:\WINDOWS\SYSTEM\wucrtupd.exe -startup >I use this to schedule a couple of things so left it in >O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe >This is a small proxy I run for the our other computer to access the internet >O4 - Startup: Proxy.lnk = C:\Program Files\AnalogX\Proxy\proxy.exe >Work related >O16 - DPF: Tarantella 3.x Combined Java Archive - https://tta0104.uscc.us-tx.citicorp.com/tarantella/java/ttaA-du.cab > > > > [Reply or follow-up to this message] re: System freezes then reboots while surfind Monday, September 13, 2004 at 7:09 pm Posted by Sparky (39 messages posted) About all I did for Ptsnoop was uncheck it and then look in win.ini and system.ini but ptsnoop was not in there. My problem exists even when wife's computer is off. Haven't seen CWShredder email yet. On Monday, September 13, 2004 at 6:31 pm, Broni wrote: >Sparky >I'm sorry for a delay, but I had to reply to Carol in your very thread, and it took >me a while. >"O4 - HKLM\..\Run: [CountrySelection] pctptt.exe" >Let's not worry about this one for now, maybe it can be disabled somewhere in your >modem settings, but it's not a big deal. Nothing dangerous, just unnecessary startup. >"O4 - HKLM\..\Run: [PTSNOOP] ptsnoop.exe" >This has to investigated farther. I gave you several options about this entry. Let >me know, which ones you did check. > >Besides that, your case is getting puzzling. Let's eliminate couple more options. >1. Since you, and your wife are on two machines network, Iwould like you to run very >same programs on her computer. >2. Since not able to download CWShredder, I'm sending you a copy of it. Check your >mail. > > > > ********************************* > > > >=========================>> > >Smartercomputing [Reply or follow-up to this message] re: System freezes then reboots while surfind Monday, September 13, 2004 at 7:22 pm Posted by Broni (1423 messages posted) I'm resending it. ********************************* =========================>> Smartercomputing On Monday, September 13, 2004 at 7:09 pm, Sparky wrote: >About all I did for Ptsnoop was uncheck it and then look in win.ini and system.ini >but ptsnoop was not in there. > >My problem exists even when wife's computer is off. > >Haven't seen CWShredder email yet. > > > [Reply or follow-up to this message] re: System freezes then reboots while surfind Monday, September 13, 2004 at 7:30 pm Posted by Ms. Eagle (33640 messages posted) I'd forgotten, it was only by clicking links on certain websites. However, memory problems CAN cause random rebooting, "while only surfing" the net. It sounds like it could be some malicious code, an ad, or something on the site. Except that would seem more likely, if you were using IE to browse, rather than Netscape. AccessRamp Monitor01 http://computercops.biz/startuplist-85.html AccessRampLAN01 http://computercops.biz/startuplist-86.html As for PTSnoop, that information I posted is accurate. It's not needed by the modem. You should remove it from startup, it's a high security risk. Run a file search for it and rename it to .old extension, if it keeps adding itself back into startup. Good luck [Reply or follow-up to this message] re: System freezes then reboots while surfind Monday, September 13, 2004 at 7:39 pm Posted by Sparky (39 messages posted) I found Ptsnoop.exe in c:\windows, I'll rename it. I'll uncheck Ptsnoop from msconfig startup. Also found Ptsnoop.lgc in the c:\windoww\applog directory, don't know what to do with that if anything. On Monday, September 13, 2004 at 7:30 pm, Carol J wrote: > > >I'd forgotten, it was only by clicking links on certain websites. However, memory >problems CAN cause random rebooting, "while only surfing" the net. It sounds like it could be some malicious code, an ad, or something on the site. >Except that would seem more likely, if you were using IE to browse, rather than Netscape. AccessRamp Monitor01 >http://computercops.biz/startuplist-85.htmlAccessRampLAN01 >http://computercops.biz/startuplist-86.htmlAs for PTSnoop, that information I posted is accurate. It's not needed by the modem. >You should remove it from startup, it's a high security risk. Run a file search for >it and rename it to .old extension, if it keeps adding itself back into startup. Good luck > [Reply or follow-up to this message] re: System freezes then reboots while surfind Monday, September 13, 2004 at 7:41 pm Posted by Sparky (39 messages posted) Ok, got it. Have to call it a night at this point. Will run it tomorrow and let you know. Thanks! On Monday, September 13, 2004 at 7:22 pm, Broni wrote: >I'm resending it. > > > > ********************************* > > > >=========================>> > >Smartercomputing [Reply or follow-up to this message] re: System freezes then reboots while surfind Monday, September 13, 2004 at 7:51 pm Posted by Broni (1423 messages posted) No problem... ********************************* =========================>> Smartercomputing On Monday, September 13, 2004 at 7:41 pm, Sparky wrote: >Ok, got it. Have to call it a night at this point. Will run it tomorrow and let >you know. > >Thanks! > > > [Reply or follow-up to this message] re: System freezes then reboots while surfind Monday, September 13, 2004 at 7:54 pm Posted by Ms. Eagle (33640 messages posted) The Applog folder can be completely cleared out. It's related to TaskMon's useless function for assisting Windows Defrag utility, "rearranging program files so programs (s'posedly) start faster". It's another unnecessary Windows resource user, which is why I suggested you remove it from startup. It's constantly running in the background gathering information. If you wish to leave it, that's your choice of course. Part of my standard maintenance instructions: Uncheck Taskmon in 'msconfig' under startup tab: Start - Run - type: msconfig - uncheck it then Apply. Download Windows ME's defrag tool and replace your original. It's much faster: ME Defrag Close all tray applications, then hit Ctl_Alt_Del and End Task on everything but Explorer and Systray. Disable your screensaver by temporarily setting to "None." Run scandisk in "Standard" mode then defrag,. First in the defrag settings, uncheck "rearrange program files so my programs start faster". Reboot. [Reply or follow-up to this message] re: System freezes then reboots while surfind Tuesday, September 14, 2004 at 4:12 pm Posted by Sparky (39 messages posted) Ok, check this out. I opened up the box swapped out the 2 sticks of 512MB memory for 2 sticks of 56MB memory, closed it up, rebooted then visisted www.google.com. It locked up for a split second then I could move the mouse but it was acting as if the system was VERY busy...not very responsive...then it rebooted as usual. On Monday, September 13, 2004 at 7:51 pm, Broni wrote: >No problem... > > > > ********************************* > > > >=========================>> > >Smartercomputing [Reply or follow-up to this message] re: System freezes then reboots while surfind Tuesday, September 14, 2004 at 4:16 pm Posted by Sparky (39 messages posted) One other thing...I saved www.google.com while at work and brought it home on a diskette which I was able to load locally without any problem. On Tuesday, September 14, 2004 at 4:12 pm, Sparky wrote: >Ok, check this out. I opened up the box swapped out the 2 sticks of 512MB memory >for 2 sticks of 56MB memory, closed it up, rebooted then visisted www.google.com. > It locked up for a split second then I could move the mouse but it was acting as >if the system was VERY busy...not very responsive...then it rebooted as usual. > > > [Reply or follow-up to this message] re: System freezes then reboots while surfind Tuesday, September 14, 2004 at 4:25 pm Posted by Broni (1423 messages posted) I assume, you are trying to prove, it's not hardware problem, right? You have a case of a century, anyway. LOL. Did you get that copy of "CWShredder"? ********************************* =========================>> Smartercomputing On Tuesday, September 14, 2004 at 4:12 pm, Sparky wrote: >Ok, check this out. I opened up the box swapped out the 2 sticks of 512MB memory >for 2 sticks of 56MB memory, closed it up, rebooted then visisted www.google.com. > It locked up for a split second then I could move the mouse but it was acting as >if the system was VERY busy...not very responsive...then it rebooted as usual. > > > [Reply or follow-up to this message] re: System freezes then reboots while surfind Tuesday, September 14, 2004 at 6:17 pm Posted by Sparky (39 messages posted) Yes, I got it. I had to run out just now and I only have a minute to type up the latest! I'm running AtGuard as my firewall on my PC. Well I created a rule that blocks almost everything then right before that, I created a rule that lets anything from www.google.com through. I was able to go to google without rebooting. Ok I thought, now just move the block everything rule down until it breaks...long story not quite as long, eventually I turned off both rules and I can still get to google without rebooting. Great I thought, problem must be fixed, let's try downloading HijackThis (which used to cause a reboot). It seems like it used to reboot on the first page but I'm not sure but it DID reboot when I tried the download. However, this time I was able to slugglishly move the mouse for almost 30 seconds before it rebooted??? On Tuesday, September 14, 2004 at 4:25 pm, Broni wrote: >I assume, you are trying to prove, it's not hardware problem, right? >You have a case of a century, anyway. LOL. >Did you get that copy of "CWShredder"? > > > > ********************************* > > > >=========================>> > >Smartercomputing [Reply or follow-up to this message] re: System freezes then reboots while surfind Tuesday, September 14, 2004 at 6:30 pm Posted by Broni (1423 messages posted) Did you actually run CWShredder already? ********************************* =========================>> Smartercomputing On Tuesday, September 14, 2004 at 6:17 pm, Sparky wrote: >Yes, I got it. > >I had to run out just now and I only have a minute to type up the latest! > >I'm running AtGuard as my firewall on my PC. Well I created a rule that blocks almost >everything then right before that, I created a rule that lets anything from www.google.com >through. I was able to go to google without rebooting. Ok I thought, now just move >the block everything rule down until it breaks...long story not quite as long, eventually >I turned off both rules and I can still get to google without rebooting. Great I >thought, problem must be fixed, let's try downloading HijackThis (which used to cause >a reboot). It seems like it used to reboot on the first page but I'm not sure but >it DID reboot when I tried the download. However, this time I was able to slugglishly >move the mouse for almost 30 seconds before it rebooted??? > > > [Reply or follow-up to this message] re: System freezes then reboots while surfind Tuesday, September 14, 2004 at 7:03 pm Posted by Sparky (39 messages posted) Yes, I did run it. Found nothing. After the reboot caused by going to the download site for HT, google causes reboots again! On Tuesday, September 14, 2004 at 6:30 pm, Broni wrote: >Did you actually run CWShredder already? > > > > ********************************* > > > >=========================>> > >Smartercomputing [Reply or follow-up to this message] re: System freezes then reboots while surfind Tuesday, September 14, 2004 at 7:08 pm Posted by Broni (1423 messages posted) I have 3 suggestions/questions: 1. Post your new HT log. 2. While of Internet, is your computer working OK? 3. Remind me, your primary browser is? ********************************* =========================>> Smartercomputing On Tuesday, September 14, 2004 at 7:03 pm, Sparky wrote: >Yes, I did run it. Found nothing. > >After the reboot caused by going to the download site for HT, google causes reboots >again! > > > [Reply or follow-up to this message] re: System freezes then reboots while surfind Tuesday, September 14, 2004 at 7:18 pm Posted by Ms. Eagle (33640 messages posted) Is Google the only site that causes your system to reboot? I knew the Shredder wouldn't find anything, since nothing showed in the HJT log, related to it or any other malware. I say forget about going on that wild goose chase again. Have you tried browsing with IE, or any other browser? You might have better luck, if you post your problem on the TechGuy support forums. Quite a few experienced helpers, frequent that forum. http://forums.techguy.org/t113867/s.html Although, if you don't have malware protection/prevention in place, I suggest SpywareBlaster. Check for and download updates after installing it. Enable protection. SpywareGuard can be used, in addition, for real time protection. Check for updates often: JavaCoolSoftware.com [Reply or follow-up to this message] re: System freezes then reboots while surfind Tuesday, September 14, 2004 at 7:29 pm Posted by Sparky (39 messages posted) 1. Unless I forget, I'll post HT log last. 2. Except for sites that cause reboots, everything seems fine both on and off the internet. 3. My primary browser is Netscape 7.2. My wife is running Netscape 4.7. But as stated, IE does the same thing. Newest news!!! I turned off javascript in my Netscape and I can surf to both google and HT download. I have turned it on and off and everytime with javascript off I have no problem, with it on I reboot on those sites!!! Logfile of HijackThis v1.98.2 Scan saved at 9:31:07 PM, on 9/14/04 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\SPOOL32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\PROGRAM FILES\ATGUARD\IAMSERV.EXE C:\WINDOWS\SYSTEM\MSTASK.EXE C:\PROGRAM FILES\ATGUARD\IAMAPP.EXE C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\AVSYNMGR.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\VSSTAT.EXE C:\WINDOWS\EXPLORER.EXE C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\VSHWIN32.EXE C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\AVCONSOL.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\WINDOWS\SYSTEM\HPZTSB03.EXE C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\ALOGSERV.EXE C:\PROGRAM FILES\ANALOGX\PROXY\PROXY.EXE C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\WEBSCANX.EXE C:\WINDOWS\SYSTEM\WMIEXE.EXE C:\PROGRAM FILES\NETSCAPE7\NETSCAPE 7\NETSCP.EXE C:\MY DOCUMENTS\HIJACKTHIS.EXE R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.sbc.com/dsl R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:6711 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1 N1 - Netscape 4: user_pref("browser.startup.homepage", "C:\\Program Files\\Netscape\\Users\\Tim\\bookmark.htm"); (C:\Program Files\Netscape\Users\tim\prefs.js) O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun O4 - HKLM\..\Run: [SystemTray] SysTray.Exe O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\SYSTEM\hpztsb03.exe O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp O4 - HKLM\..\Run: [CriticalUpdate] C:\WINDOWS\SYSTEM\wucrtupd.exe -startup O4 - HKLM\..\Run: [Alogserv] C:\Program Files\McAfee\McAfee VirusScan\alogserv.exe O4 - HKLM\..\Run: [CountrySelection] pctptt.exe O4 - HKLM\..\Run: [PTSNOOP] ptsnoop.exe O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe O4 - HKLM\..\RunServices: [McAfeeVirusScanService] C:\Program Files\McAfee\McAfee VirusScan\AVSYNMGR.EXE O4 - Startup: Proxy.lnk = C:\Program Files\AnalogX\Proxy\proxy.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE10\EXCEL.EXE/3000 O9 - Extra button: Net2Phone - {4B30061A-5B39-11D3-80F8-0090276F843F} - C:\Program Files\Net2Phone\Net2fone.exe O9 - Extra 'Tools' menuitem: Net2Phone - {4B30061A-5B39-11D3-80F8-0090276F843F} - C:\Program Files\Net2Phone\Net2fone.exe O16 - DPF: Tarantella 3.x Combined Java Archive - https://tta0104.uscc.us-tx.citicorp.com/tarantella/java/ttaA-du.cab O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - C:\Program Files\Yahoo!\common\yinsthelper.dll O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab O17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain = sbcglobal.net On Tuesday, September 14, 2004 at 7:08 pm, Broni wrote: >I have 3 suggestions/questions: >1. Post your new HT log. >2. While of Internet, is your computer working OK? >3. Remind me, your primary browser is? > > > > > ********************************* > > > >=========================>> > >Smartercomputing [Reply or follow-up to this message] re: System freezes then reboots while surfind Tuesday, September 14, 2004 at 7:42 pm Posted by Broni (1423 messages posted) I'm not even looking at your HT log, at this time, BUT, please let me know, since you may be into something, are you talking about Micro$oft Java Virtual Machine, or Sun's Java? ********************************* =========================>> Smartercomputing On Tuesday, September 14, 2004 at 7:29 pm, Sparky wrote: > >1. Unless I forget, I'll post HT log last. >2. Except for sites that cause reboots, everything seems fine both on and off the >internet. >3. My primary browser is Netscape 7.2. My wife is running Netscape 4.7. But as >stated, IE does the same thing. > >Newest news!!! I turned off javascript in my Netscape and I can surf to both google >and HT download. I have turned it on and off and everytime with javascript off I >have no problem, with it on I reboot on those sites!!! > >Logfile of HijackThis v1.98.2 >Scan saved at 9:31:07 PM, on 9/14/04 >Platform: Windows 98 SE (Win9x 4.10.2222A) >MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) > >Running processes: >C:\WINDOWS\SYSTEM\KERNEL32.DLL >C:\WINDOWS\SYSTEM\MSGSRV32.EXE >C:\WINDOWS\SYSTEM\SPOOL32.EXE >C:\WINDOWS\SYSTEM\MPREXE.EXE >C:\PROGRAM FILES\ATGUARD\IAMSERV.EXE >C:\WINDOWS\SYSTEM\MSTASK.EXE >C:\PROGRAM FILES\ATGUARD\IAMAPP.EXE >C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\AVSYNMGR.EXE >C:\WINDOWS\SYSTEM\mmtask.tsk >C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\VSSTAT.EXE >C:\WINDOWS\EXPLORER.EXE >C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\VSHWIN32.EXE >C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\AVCONSOL.EXE >C:\WINDOWS\SYSTEM\SYSTRAY.EXE >C:\WINDOWS\SYSTEM\HPZTSB03.EXE >C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\ALOGSERV.EXE >C:\PROGRAM FILES\ANALOGX\PROXY\PROXY.EXE >C:\PROGRAM FILES\MCAFEE\MCAFEE VIRUSSCAN\WEBSCANX.EXE >C:\WINDOWS\SYSTEM\WMIEXE.EXE >C:\PROGRAM FILES\NETSCAPE7\NETSCAPE 7\NETSCP.EXE >C:\MY DOCUMENTS\HIJACKTHIS.EXE > >R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.sbc.com/dsl >R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer >= http=127.0.0.1:6711 >R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride >= 127.0.0.1 >N1 - Netscape 4: user_pref("browser.startup.homepage", "C:\\Program Files\\Netscape\\Users\\Tim\\bookmark.htm"); >(C:\Program Files\Netscape\Users\tim\prefs.js) >O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX >O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun >O4 - HKLM\..\Run: [SystemTray] SysTray.Exe >O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\SYSTEM\hpztsb03.exe >O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp >O4 - HKLM\..\Run: [CriticalUpdate] C:\WINDOWS\SYSTEM\wucrtupd.exe -startup >O4 - HKLM\..\Run: [Alogserv] C:\Program Files\McAfee\McAfee VirusScan\alogserv.exe >O4 - HKLM\..\Run: [CountrySelection] pctptt.exe >O4 - HKLM\..\Run: [PTSNOOP] ptsnoop.exe >O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe >O4 - HKLM\..\RunServices: [McAfeeVirusScanService] C:\Program Files\McAfee\McAfee >VirusScan\AVSYNMGR.EXE >O4 - Startup: Proxy.lnk = C:\Program Files\AnalogX\Proxy\proxy.exe >O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE10\EXCEL.EXE/3000 >O9 - Extra button: Net2Phone - {4B30061A-5B39-11D3-80F8-0090276F843F} - C:\Program >Files\Net2Phone\Net2fone.exe >O9 - Extra 'Tools' menuitem: Net2Phone - {4B30061A-5B39-11D3-80F8-0090276F843F} - >C:\Program Files\Net2Phone\Net2fone.exe >O16 - DPF: Tarantella 3.x Combined Java Archive - https://tta0104.uscc.us-tx.citicorp.com/tarantella/java/ttaA-du.cab >O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - C:\Program Files\Yahoo!\common\yinsthelper.dll >O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab >O17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain = sbcglobal.net > > > > [Reply or follow-up to this message] re: System freezes then reboots while surfind Tuesday, September 14, 2004 at 7:49 pm Posted by Sparky (39 messages posted) I don't know if it involves MS or Sun java, it is just a check box in the netscape preferences. I haven't tried IE since I'm not that familiar with it. On Tuesday, September 14, 2004 at 7:42 pm, Broni wrote: >I'm not even looking at your HT log, at this time, BUT, please let me know, since >you may be into something, are you talking about Micro$oft Java Virtual Machine, >or Sun's Java? > > > > ********************************* > > > >=========================>> > >Smartercomputing [Reply or follow-up to this message] re: System freezes then reboots while surfind Tuesday, September 14, 2004 at 7:52 pm Posted by Ms. Eagle (33640 messages posted) This hasn't got anything to do with which JavaVM you have installed. You say your problem's related to java script. Now that you know that, there's no need to start using IE. IE has way too many security issues and is very vulnerable to malware infections and hijacking problems. Considering your problem is on Google for one, I know there aren't malicious scripts running on the site. It must be the way Netscape handles scripts. I suggest posting on the Netscape forum or trying Firefox. Most of us aren't familiar with Netscape specific issues. They do have a forum. [Reply or follow-up to this message] re: System freezes then reboots while surfind Tuesday, September 14, 2004 at 8:07 pm Posted by Broni (1423 messages posted) OK...go Start>Settings>Control Panel....double click on "Interenet Options", click on "Advanced" tab....Can you see a settting like this ********************************* =========================>> Smartercomputing On Tuesday, September 14, 2004 at 7:49 pm, Sparky wrote: > >I don't know if it involves MS or Sun java, it is just a check box in the netscape >preferences. I haven't tried IE since I'm not that familiar with it. > > [Reply or follow-up to this message] re: System freezes then reboots while surfind Tuesday, September 14, 2004 at 9:30 pm Posted by Sparky (39 messages posted) I may try that soon, thanks. On Tuesday, September 14, 2004 at 7:52 pm, Carol J wrote: > > >This hasn't got anything to do with which JavaVM you have installed. You say your >problem's related to java script. Now that you know that, there's no need to start >using IE. IE has way too many security issues and is very vulnerable to malware infections >and hijacking problems. Considering your problem is on Google for one, I know there aren't malicious scripts >running on the site. It must be the way Netscape handles scripts. I suggest posting >on the Netscape forum or trying Firefox. Most of us aren't familiar with Netscape >specific issues. They do have a forum. > [Reply or follow-up to this message] re: System freezes then reboots while surfind Tuesday, September 14, 2004 at 9:31 pm Posted by Sparky (39 messages posted) No, I don't see sun java in there. On Tuesday, September 14, 2004 at 8:07 pm, Broni wrote: >OK...go Start>Settings>Control Panel....double click on "Interenet Options", click >on "Advanced" tab....Can you see a settting like this > > > > > > ********************************* > > > >=========================>> > >Smartercomputing [Reply or follow-up to this message] re: System freezes then reboots while surfind Tuesday, September 14, 2004 at 9:40 pm Posted by Broni (1423 messages posted) This is weird. We have to solve this issue, but I need to go bed,...early wake up tomorrow, so let's continue tomorrow. ********************************* =========================>> Smartercomputing On Tuesday, September 14, 2004 at 9:31 pm, Sparky wrote: >No, I don't see sun java in there. > > > [Reply or follow-up to this message] re: System freezes then reboots while surfind Tuesday, September 14, 2004 at 9:49 pm Posted by Sparky (39 messages posted) At least my wife can surf without rebooting my PC now!!! Thanks, I've got an early day tomorrow too. On Tuesday, September 14, 2004 at 9:40 pm, Broni wrote: >This is weird. We have to solve this issue, but I need to go bed,...early wake up >tomorrow, so let's continue tomorrow. > > > > ********************************* > > > >=========================>> > >Smartercomputing [Reply or follow-up to this message] re: System freezes then reboots while surfind Tuesday, September 14, 2004 at 9:57 pm Posted by Broni (1423 messages posted) We'll solve it, don't worry. ********************************* =========================>> Smartercomputing On Tuesday, September 14, 2004 at 9:49 pm, Sparky wrote: >At least my wife can surf without rebooting my PC now!!! > >Thanks, I've got an early day tomorrow too. > > > [Reply or follow-up to this message] re: System freezes then reboots while surfind Wednesday, September 15, 2004 at 4:48 pm Posted by Sparky (39 messages posted) I'm going to be out for a few hours, but any ideas. Can I reinstall/replace javascript? I'm not even sure how it gets installed in the first place. On Tuesday, September 14, 2004 at 9:57 pm, Broni wrote: >We'll solve it, don't worry. > > > > ********************************* > > > >=========================>> > >Smartercomputing [Reply or follow-up to this message] re: System freezes then reboots while surfind Wednesday, September 15, 2004 at 5:39 pm Posted by Broni (1423 messages posted) I've been using Netscape for years (since Mosaic time...ca. 1993). This thread got really long, so, please let me know, if I repeated myself. You need to uninstall M$ Java Virtual Machine, and install Sun Java to begin with. Please, let me know, if you need directions. ********************************* =========================>> Smartercomputing On Wednesday, September 15, 2004 at 4:48 pm, Sparky wrote: >I'm going to be out for a few hours, but any ideas. Can I reinstall/replace javascript? > I'm not even sure how it gets installed in the first place. > > > [Reply or follow-up to this message] re: System freezes then reboots while surfind Wednesday, September 15, 2004 at 7:40 pm Posted by Sparky (39 messages posted) Yes, it has gotten long. No, you haven't repeated yourself. Yes, I need directions. On Wednesday, September 15, 2004 at 5:39 pm, Broni wrote: >I've been using Netscape for years (since Mosaic time...ca. 1993). >This thread got really long, so, please let me know, if I repeated myself. You need >to uninstall M$ Java Virtual Machine, and install Sun Java to begin with. Please, >let me know, if you need directions. > > > > ********************************* > > > >=========================>> > >Smartercomputing [Reply or follow-up to this message] re: System freezes then reboots while surfind Wednesday, September 15, 2004 at 8:51 pm Posted by Broni (1423 messages posted) OK. Go HERE, download, and run Micro$oft Java Vitual Machine removal tool. It'll get rid of it. Then, go HERE, and download, and install Sun Java. Then (I don't remember, if you have to restart, but it may tell you), check, if you have Java listed in Netscape "Preferences". It should be also listed in Control Panel, as separate entry. ********************************* =========================>> Smartercomputing On Wednesday, September 15, 2004 at 7:40 pm, Sparky wrote: >Yes, it has gotten long. >No, you haven't repeated yourself. >Yes, I need directions. > > > [Reply or follow-up to this message] Tip: Use one of the [Reply or follow-up to this message] links above to add a message to this thread Search this forum Start a new thread on a different subject Report abuse of the forum Return to the Windows 98 Discussion Forum