PCTech Forums

by **hue_jass** » Tue Jul 06, 2004 5:45 am

Logfile of HijackThis v1.98.0
Scan saved at 12:41:55 PM, on 7/6/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\scot\Desktop\everything i need\Panicware\Pop-Up Stopper\dpps2.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\EmergencyUtils\HijackThis.exe

O4 - HKLM\..\Run: [Pop-Up Stopper] "C:\Documents and Settings\scot\Desktop\everything i need\Panicware\Pop-Up Stopper\dpps2.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O16 - DPF: {4E888414-DB8F-11D1-9CD9-00C04F98436A} (Microsoft.WinRep) - https://webresponse.one.microsoft.com/o ... winrep.cab
O16 - DPF: {CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA} (Java Runtime Environment 1.4.1_06) -

dont see much hmm....so yea and after i deleted IEDRIVER I restarted my computer and it was fine , ONCE but now its freezing for 5 mins at the startup and i believe i just may have again deleted a windows sys file but i have no clue what it would be

~s

by **brad** » Tue Jul 06, 2004 10:04 am

I went back and looked at your original Topic. (Where this post should have been.) If you only deleted what was listed then you're Ok.
Try this first:
Run HJT. Go to Config. / Misc. Tools / Generate StartupList Log (Full)
Post that here and we may see what's hanging in startup.
brad

by **hue_jass** » Mon Jul 12, 2004 7:23 pm

sorry.......ya said post in HJT help forum so i did

StartupList report, 7/12/2004, 2:19:09 PM
StartupList version: 1.52.2
Started from : C:\EmergencyUtils\HijackThis.EXE
Detected: Windows XP SP1 (WinNT 5.01.2600)
Detected: Internet Explorer v6.00 SP1 (6.00.2800.1106)
* Using default options
==================================================

Running processes:

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Documents and Settings\scot\Desktop\everything i need\Panicware\Pop-Up Stopper\dpps2.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\EmergencyUtils\HijackThis.exe

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

Pop-Up Stopper = "C:\Documents and Settings\scot\Desktop\everything i need\Panicware\Pop-Up Stopper\dpps2.exe"
NvCplDaemon = RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

AIM = C:\Program Files\AIM\aim.exe -cnetwait.odl

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=Explorer.exe
SCRNSAVE.EXE=C:\WINDOWS\System32\logon.scr
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry key not found*
HKLM\..\Policies: Shell=*Registry value not found*

--------------------------------------------------

Enumerating Download Program Files:

[{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}]

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\System32\macromed\flash\Flash.ocx
CODEBASE = http://active.macromedia.com/flash2/cabs/swflash.cab

--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

PostBootReminder: C:\WINDOWS\system32\SHELL32.dll
CDBurn: C:\WINDOWS\system32\SHELL32.dll
WebCheck: C:\WINDOWS\System32\webcheck.dll
SysTray: C:\WINDOWS\System32\stobject.dll
UPnPMonitor: C:\WINDOWS\System32\upnpui.dll

--------------------------------------------------
End of report, 3,391 bytes
Report generated in 0.020 seconds

by **brad** » Mon Jul 12, 2004 9:06 pm

Startup looks Ok. Is the delay before or after the "Windows" Screen?
Also, how about a fresh HJT Log File.
brad

by **hue_jass** » Wed Jul 14, 2004 2:56 am

after the windows screen......after the window "intro song thinggy" ya know the "Duuuuun dun duh da duhhhhhhhh" clip
and then it freezes.

HJT log...

Logfile of HijackThis v1.98.0
Scan saved at 9:54:31 PM, on 7/13/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Documents and Settings\scot\Desktop\everything i need\Panicware\Pop-Up Stopper\dpps2.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\Program Files\BSPlayer\bsplay.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\EmergencyUtils\HijackThis.exe

O4 - HKLM\..\Run: [Pop-Up Stopper] "C:\Documents and Settings\scot\Desktop\everything i need\Panicware\Pop-Up Stopper\dpps2.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O16 - DPF: {CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA} (Java Runtime Environment 1.4.1_06) -

by **brad** » Wed Jul 14, 2004 6:30 am

by **hue_jass** » Wed Jul 21, 2004 8:44 am

dont worry, its just been bugging me...

NOD32 aintivirus the "trial" just ended to i uninstalled it and well that did obviously nothing to my weird 'frozen taskbar' incident. so now its 3 mins timed til my taskbar loads b/c the time once windows starts and then the time after the taskbar loads and shows my programs i have open (now i just set up IExplorer w/ a shortcut on my desktop b/c otherwise i couldn't open it for 3 mins)

well here it is....turned out to be the same as last times...

Logfile of HijackThis v1.98.0
Scan saved at 3:42:28 AM, on 7/21/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\Documents and Settings\scot\Desktop\everything i need\Panicware\Pop-Up Stopper\dpps2.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\EmergencyUtils\HijackThis.exe

O4 - HKLM\..\Run: [Pop-Up Stopper] "C:\Documents and Settings\scot\Desktop\everything i need\Panicware\Pop-Up Stopper\dpps2.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SysExplr] C:\HEROSOFT\Hero Super Player\SYSEXPLR.EXE
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O16 - DPF: {CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA} (Java Runtime Environment 1.4.1_06) -

by **brad** » Wed Jul 21, 2004 10:27 am

Do you mean the Icon down by the "Start" button or by the Clock takes 3 min. to load?
Are you on Dialup? Is AIM trying to connect when you first start?
brad

by **Geekgirl** » Wed Jul 21, 2004 4:12 pm

What it sounds like to me is hes got some things loading at startup and therefore giving him a delay like brad suggested with AIM.
Go and check your system resources immediately after starting the computer. You should have 70% plus.

by **hue_jass** » Thu Jul 22, 2004 9:06 pm

I never had a problem loading my computer w/ AIM b/c i have a fast enough processor to do the trick 1.6 ghz processor 384mb ram. SO just to prove that my taskbar is frozen not because of AIM i did 3 more tests restarting my computer each time:

1) started w/ AIM loaded, aim loaded 2 secs after my desktop appears and then taskbar was still frozen
2) started w/out Aim loaded to start when windows does....still taskbar was frozen
3) tried to turn off all 'startup' programs and still my taskbar is frozen...

^^ brad what i meant by the '3mins' was that I sat around and watched to see how long my taskbar was gonna be frozen. IT turns out everytime I start the computer it takes 3 mins (by what the clock says even though that freezes for 3 mins) before i can use the "start" menu or the icons on my bar.

^^Geekgirl

I start up w/ 86% free resources, thats not the problem <Aim that is>

still Im very confused lol. and if u need an HJT log its the one above that is updated b/c i haven't changed anything.

soooo all in all I'm guessing again that I deleted some system "rundll32" or some junky file on accident or my antivirus coulda done that saying it was a 'WIN32" virus and deleted the files w/out asking me what the files were or if I could just 'replace' w/out deleting.

**~S~**

by **brad** » Thu Jul 22, 2004 9:18 pm

From "Experts Exchange":

If your system hangs about 2 or 3 minutes at startup, where you can't access the Start button or the Taskbar, it may be due to one specific service (Background Intelligent Transfer) running in the background.

1. Click on Start/Run, type 'msconfig', then click 'OK'.
2. Go to the 'Services' tab, find the 'Background Intelligent Transfer' service, disable it, apply the changes & reboot.

brad

by **hue_jass** » Fri Jul 30, 2004 5:50 am

PCTech Forums

k updated HJT, taskbar still freezing @ startup

k updated HJT, taskbar still freezing @ startup

check more? its okay...dont worry brad its just been buggin.

hm. never had probs w/ aim..

werid..

Who is online