View Full Version: I'm Going To Pull My Hair Out....

Faith, Hope, and Love > Computers & Technology > I'm Going To Pull My Hair Out....



Title: I'm Going To Pull My Hair Out....


andiesmama - February 7, 2006 05:11 PM (GMT)
...and I really don't want to be bald!

I'm TRYING to run the AdAware scan....I've got Spybot as well (per Sarah's recommendation! :) ) and already ran that scan, it found a couple things which it took care of. Sooooo, now when I'm trying to run AdAware, it finds like 2 things, then my computer automatically shuts down, & reboots.....I've done it like 5 times, the same thing happens. No warnings, no error messages, nothing....what's going on?

We've got Windows XP, use IE 6.0, and the computer info is (whatever this means, I just copied it down):

AMD Athlon XP 3000+
2.16 GHz
512 MB of RAM

Should I uninstall & reinstall the spyware? Oh, I also ran Norton's Antivirus scan this morning when it first happened and it didn't find any viruses....

:bored: :grrrrrr:

squatpuke - February 7, 2006 05:23 PM (GMT)
.
.
Try booting into "safe mode" and running the scan....it has probably found something that is designed to NOT to be removed by Adaware....


If you don't know how to boot in "safe mode"...just reboot and hit F8 on your keyboard while it boots....

This will load Windows w/o any drivers or startup programs....


Let me know....

andiesmama - February 7, 2006 05:36 PM (GMT)
good idea....but it did the same thing...rebooted in safe mode (learn something new every day!), but happened the same way as before.... :huh:

squatpuke - February 7, 2006 05:40 PM (GMT)
.
.
hmmm....seems like maybe Adaware is doing that...is there a setting to reboot AFTER scan?

Might try uninstalling and reinstalling if there isn't...

Let me know...I have another idea.

squatpuke - February 7, 2006 05:42 PM (GMT)
any clue as too what Adaware has found...what is on the display when it reboots.

squatpuke - February 7, 2006 05:50 PM (GMT)
did you get my gmail....

Addicted2~Jesus - February 7, 2006 05:58 PM (GMT)
Was goin to ask the same thin, can you see what file er the location that it's scannin in at the time it reboots? Sounds like it's sumthin that doesn't wanna be removed, but to be on the safe side, uninstall adaware an re-install it. Also what options are you usin when scannin? ie. full scan, smart scan etc. I have heard in the past.... norton doesn't like to play well wit other programs, an if norton has qarentiend sumthin er nother an adaware is tryin to mess wit it it'll crash. Try dumpin anythin that norton has hidin away an see if that also doesn't help. It'd be very very helpful if you could tell us the name of the file adaware is messin wit at the time it restarts.

andiesmama - February 7, 2006 06:25 PM (GMT)
squat...I got your email & ran hijackthis....do you want what the logfile shows? Here it is:
QUOTE
Logfile of HijackThis v1.99.1
Scan saved at 1:24:27 PM, on 2/7/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Classic PhoneTools\CapFax.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\hphmon05.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Ares\Ares.exe
C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\Silicon Image\SiISATARaid\SATARaid.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\PROGRA~1\WINZIP\winzip32.exe
C:\Documents and Settings\Debby\Local Settings\Temp\HijackThis.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\iexplore.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: ATLDistrib Object - {2353FCBC-012D-487B-8BF3-865C0929FBEB} - C:\WINDOWS\system32\pmnnl.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [CapFax] C:\Program Files\Classic PhoneTools\CapFax.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
O4 - HKLM\..\Run: [CTDVDDet] C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [AsioReg] REGSVR32.EXE /S CTASIO.DLL
O4 - HKLM\..\Run: [SBDrvDet] C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [CTStartup] "C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE" /run
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{D946675D-1D6C-4dc8-9E0D-B4B8EAA30EAA}\hphupd05.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: SATARaid.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .mp3: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin4.dll
O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v10/StagingUI.cab40641.cab
O16 - DPF: {09C6CAC0-936E-40A0-BC26-707480103DC3} (shizmoo Class) - http://www.uproar.com/applets/activex/shiz...pside_web18.cab
O16 - DPF: {0A50726E-51A2-42BB-8392-98F050C40A10} (SkillJamLoader Class) - http://boxerjam.skilljam.com/ssp/SkillJamLoader.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) - http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab32846.cab
O16 - DPF: {3FE16C08-D6A7-4133-84FC-D5BFB4F7D886} (WebGameLoader Class) - http://zone.msn.com/bingame/rtlw/default/R...bGameLoader.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www.snapfish.com/SnapfishActivia.cab
O16 - DPF: {4B9F2C37-C0CF-42BC-BB2D-DCFA8B25CABF} (PopCapLoaderCtrl Class) - http://zone.msn.com/bingame/rock/default/popcaploader1.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by22fd.bay22.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10/ZPAChat.cab32846.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co...b?1117485831796
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1138713019781
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://zone.msn.com/bingame/luxr/default/mjolauncher.cab
O16 - DPF: {809A6301-7B40-4436-A02C-87B8D3D7D9E3} (ZPA_DMNO Object) - http://zone.msn.com/bingame/zpagames/zpa_dmno.cab41754.cab
O16 - DPF: {8C279F4E-917E-4CD2-8DF0-D9C73C0CE763} (ZPA_WheelOfFortune Object) - http://zone.msn.com/bingame/zpagames/zpa_wof.cab40641.cab
O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} (cpbrkpie Control) - http://a19.g.akamai.net/7/19/7125/1452/ftp...02/cpbrkpie.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur...loadManager.ocx
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) - http://zone.msn.com/bingame/gold/default/gf.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://sympatico.zone.msn.com/binframework...xy.cab41227.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://zone.msn.com/bingame/dim2/default/popcaploader_v6.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
O16 - DPF: {FF3C5A9F-5A99-4930-80E8-4709194C2AD3} (ZPA_Backgammon Object) - http://zone.msn.com/bingame/zpagames/ZPA_B...on.cab36385.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: pmnnl - C:\WINDOWS\system32\pmnnl.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe



clayman - February 7, 2006 06:33 PM (GMT)
Computers were SO MUCH EASIER in DOS days.
QUOTE
640k oughta be enough for anybody!

andiesmama - February 7, 2006 06:34 PM (GMT)
OK, I DID uninstall and then reinstall AdAware....same problem. So I wrote down the last thing I saw before the computer shut down....it was in the directory

WINDOWS/sys32.ICAAP.dll

something like that....I'm pretty sure I got all the words, but there might be backslashes rather than periods...does that sound right?? :dunno: And I did the full system scan, looking for "negligible risk entries AND low-risk threats"

OH, Also took A2Js advice & cleane out the junk that Norton's was holding onto as well as closed Norton's when I ran Adaware this last time....nothing changed...

I'm pretty clueless when it comes to computer stuff....

clayman - February 7, 2006 06:39 PM (GMT)
QUOTE (andiesmama @ Feb 7 2006, 12:34 PM)
WINDOWS/sys32.ICAAP.dll

Found sys.ICAAP.dll in a Google search. It was written in arabic. I can't read arabic.

Found ICAAP in a Google Search. Something to do with Athabasca University (Hey, Canucks! This is yours!) and International Consortium for the Advancement of Academic Publication.

Athabasca University is no longer supporting BlueSky System. My guess is, if you go back into safe mode (or dos mode) and rename C:/WINDOWS/SYSTEM/ICAAP.dll a problem will be remedied. Change the name to ICAAP.dlk or something similar but different. Change the extension so Windows won't pick it up at all.

If the system still has problems, change the name back. Don't delete it 'cuz we really don't know what it is or does.

squatpuke - February 7, 2006 06:43 PM (GMT)
Sorry deb...I just took a second to look....I'll leave this in Clay's hands..maybe he can help...


Just browsing quick like....this looks interesting...


I GOTTA GO TO BED...



O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h

http://www.auditmypc.com/process/ares.asp

andiesmama - February 7, 2006 06:55 PM (GMT)
ok, I checked again when I ran adaware....I wrote it wrong the first time....it's

ICAAPI.dll

BUT it looks like it's something different everytime I run it....they're all in the SYS32 but one was msvcp60.dll and another time it was kerberos.dll

both just recently, actually the last two times I ran adaware....

I'm getting a headache.... :tease:

Addicted2~Jesus - February 7, 2006 07:03 PM (GMT)
Couple thins, what version of adaware are you usin? Secondly, go to scan now function, select "use custom scannin options" then beside it, click customize and then scan only the windows/system32 folder, or try a different folder, say documents and settings andiesmama etc make sure the program can complete a scan on sumthin and not crash under it's own power, tryin to see if sumthin outside is crashin it er not. One other thin you might wanna try also while it's scannin, is unplug your net connection so you don't have internet access.

Your log file looked fine, if not... overly used hehe, hp, etc. But I'm wit sqaut on the ares thin.... seems like I heard sumthin bout that not to long ago, havta check my book of old problems hehe

clayman - February 7, 2006 07:05 PM (GMT)
QUOTE (andiesmama @ Feb 7 2006, 12:55 PM)
ICAAPI.dll

....msvcp60.dll ... kerberos.dll

Headache, baldness -- welcome to my world. :haha:

The three files listed above are all required for Windows operation. Do not rename or delete them.

It's possible that your Windows installation may be corrupt, and therefore AdAware isn't running properly. Do you have the original CDs or was it pre-loaded? There are repair options on both. What brand is your PC?

andiesmama - February 7, 2006 07:09 PM (GMT)
well...I uninstalled Ares, but if I DID have that worm on here, wouldn't Norton's have found it? :dunno:

As far as the Windows installation being corrupt, would it have happened all of a sudden like this? We had to re-install windows oh, about 9 months or so ago but haven't had a problem since....

Brand is my PC? Athlon....is that a brand name? We've had it forever...the name on the case is Thermaltake....

OK A2J...I'll try to run adaware in bits & pieces to see what happens....

Addicted2~Jesus - February 7, 2006 07:12 PM (GMT)
Yeah, sumthin bout ICAAPI.dll sounded to familar, seems it's part of the rdp terminal services, an unless sumthins attached to the file er combination of files, as it's dependant on some others it's not liable to be the cause. Might be missin the file er it may be happein so fast she cain't see what it is. Though, you could rename that file an git a new one IF the ICAAPI.dll is the only problem. So far as I know it's not depandant on your particular windows install, an even if it is we could always fix it so long as you didn't delete your file hehe

Addicted2~Jesus - February 7, 2006 07:13 PM (GMT)
Athlon is your chips name/brand, made by AMD an thermal etc etc is a case manufacture an heat sinks an fans etc hhee, where'd you buy your pc?

andiesmama - February 7, 2006 07:32 PM (GMT)
Ty bought it online a couple years ago....don't ask me, HE'S the one in charge of buying the computer stuff but SOMEHOW it falls to ME to figure out how to fix it when it goes crazy!

Thanks you guys for helping me out on this....I guess it's not a huge problem BUT it's still annoying....

The version of adaware is 1.06r1

I'm running it now, and so far it's worked fine for EVERYTHING....altho I have NOT run it for the sys32 area yet....that's the only one that's left, so we'll see what happens....should I try to run it ONLY on the sys32 section??

It keeps finding something called "winfixer"....winfixer; type=regkey; object=hkey_local_machine:software\Microsoft\Windows\CurrentVersion\Explorer\Browser....

Addicted2~Jesus - February 7, 2006 07:52 PM (GMT)
Yeah it's one em lil critters, but I didn't see mention of it in your log file, so it's probly left over stuff is all, adaware will take care of it if it completes witout crashin hehe, goin to double check your log though but I don't member seein anythin mentioned in it.

andiesmama - February 7, 2006 07:52 PM (GMT)
ok, I give up....I went ahead & ran it for the sys32 folder and it did FINE, no shut downs....kept finding that winfixer thing....and I keep getting that as a popup as well...

BUT when I tried to do the full system scan again, it shut down again just like before....

I'm not having any troubles online or anything, should I just forget about it? Uninstall it & just use Spybot? Is there another free one that's good?

bleah....

Addicted2~Jesus - February 7, 2006 07:59 PM (GMT)
It scanned c:\windows\system32 witout any problems? It completed the scan an you told it to do a full system scan an it crashed agin? Did it remove the winfixer? It's a stubborn lil bug but there is a way to git rid of it hehe jes takes a bit of work, could do a lil searchin an see if someones built a removal tool for it, no doubt someone has, but here's a list of what needs to be removed. Here

Le'me go find the microsoft one, I haven't checked to see if it's still free but it's a good one to, jes when you install it tell it not to join the ...... mmmm furgot what it's called, where it'll send the report an whatnot, talks to much to microcrap.

Giants software, micro calls it spyware (beta)

Addicted2~Jesus - February 7, 2006 08:04 PM (GMT)
Here is a removal set of instructions an removal tool I honestly don't know bout these guys per-se, but they are linked to a few different sites recommendin em so they "probly" ain't all that bad. You could search your puter for the files listed in that first link up there an see if you have them, cause I would surmise that it's probly left over junk an you don't have all of this winfixer actually runnin.

andiesmama - February 7, 2006 09:04 PM (GMT)
I just wanted to say thanks A2J....for looking up all those links & stuff....*knock on wood* I haven't seen that winfixer thing pop up yet....maybe that Microsoft spyware got it....

If you'd send me a bill for your computer expertise, I PROMISE I'll pay it!!! I know it took alot of your time.....

Addicted2~Jesus - February 7, 2006 09:08 PM (GMT)
LOL, Sarah's the one that handles all that stuff, I'm constantly in trouble for not chargin folks LOL

She has this thin on er invoices: Please make checks payable to L & S puter repair.... jes annoys me... needs to be there but it annoys me.

Haven't really had much buisness of late... fact I've only got one system here to work on an I refuse to charge on it, buisness jes not what it used to be. Sarah says it's cause I fix em to well.... probly is, beats me. Should stop tellin folks how to avoid gittin into trouble lol

Res assured Deb, I wasn't doin anythin anyways... bein rather lazy today.

clayman - February 7, 2006 10:13 PM (GMT)
I've seen Windows run great for two years then suddenly crash due to a corruption. Lots of things can cause Windows to be corrupt - improper shutdown, poorly written applications, not to mention all the bad stuff floating around.

I periodically back-up and reformat my machines just 'cuz of that.

Norton won't necessarly get everything, nor will McAfee or FProt or ... You run them in tandem, or just get one and hope for the best. Also check out Trend Micro for a good, free on-line virus scan.

andiesmama - February 8, 2006 12:40 PM (GMT)
Thanks Clay....I didn't know that about Windows....and I'm going to check out that free virus thing as well.....

PS....I KNOW what your invoice would consist of....a basket of habaneros and a good stout beer!! :thumbsup:

clayman - February 8, 2006 01:35 PM (GMT)
QUOTE (andiesmama @ Feb 8 2006, 06:40 AM)
Thanks Clay....I didn't know that about Windows....and I'm going to check out that free virus thing as well.....

PS....I KNOW what your invoice would consist of....a basket of habaneros and a good stout beer!! :thumbsup:

:booyah:

You got that right! Just load it in A2J's truck next time he's in town and he'll drop it off (probably just the stout - the habaneros will stay on board) on his way home...

Honey - February 8, 2006 01:53 PM (GMT)
I clicked that Trend Micro link...it says you have to have Java. My computer won't accept Java.

clayman - February 8, 2006 02:08 PM (GMT)
QUOTE (Lena @ Feb 8 2006, 07:53 AM)
I clicked that Trend Micro link...it says you have to have Java. My computer won't accept Java.

Yeah, you gotta turn off some of the paranoid stuff to run it. (or, in this case, turn it on)




Hosted for free by InvisionFree