S.O.S big problem...

• snop_coolz

  31 Oct 06, 21:42

  Logfile of HijackThis v1.99.1
  Scan saved at 9:42:02 PM, on 10/31/2006
  Platform: Windows XP SP2 (WinNT 5.01.2600)
  MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
  
  Running processes:
  C:\WINDOWS\System32\smss.exe
  C:\WINDOWS\system32\winlogon.exe
  C:\WINDOWS\system32\services.exe
  C:\WINDOWS\system32\lsass.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\System32\svchost.exe
  C:\WINDOWS\Explorer.EXE
  C:\WINDOWS\system32\spoolsv.exe
  C:\Program Files\McAfee.com\VSO\mcvsshld.exe
  C:\Program Files\McAfee.com\VSO\oasclnt.exe
  C:\PROGRA~1\mcafee.com\agent\mcagent.exe
  C:\Program Files\Common Files\Real\Update_OB\realsched.exe
  C:\Program Files\WinPoET Broadband Connection\winpppoverethernet.exe
  C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
  C:\WINDOWS\system32\rundll32.exe
  c:\progra~1\mcafee.com\vso\mcvsescn.exe
  C:\WINDOWS\system32\ctfmon.exe
  C:\Program Files\MSN Messenger\msnmsgr.exe
  C:\Program Files\Creative\Bluetooth Software\BTTray.exe
  C:\Program Files\GetRight\getright.exe
  C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
  C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
  c:\progra~1\mcafee.com\vso\mcvsftsn.exe
  C:\Program Files\Messenger\msmsgs.exe
  C:\Program Files\Creative\Bluetooth Software\bin\btwdins.exe
  C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
  c:\program files\mcafee.com\agent\mcdetect.exe
  c:\PROGRA~1\mcafee.com\vso\mcshield.exe
  c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
  C:\WINDOWS\system32\svchost.exe
  C:\Program Files\WinPoET Broadband Connection\WrOS.EXE
  C:\Program Files\Mozilla Firefox\firefox.exe
  C:\Documents and Settings\liew\Desktop\HijackThis.exe
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com.sg/0SEENSG/SAOS01
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75
  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = fol.singnet.com.sg:8080
  O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
  O2 - BHO: (no name) - {206E52E0-D52E-11D4-AD54-0000E86C26F6} - C:\PROGRA~1\FRESHD~1\FRESHD~1\fdcatch.dll
  O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll
  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
  O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
  O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\zh-sg\msntb.dll
  O2 - BHO: CIEObjectObj Object - {CA13D72F-2DAC-4D99-B08D-C5EA1C920E89} - C:\WINDOWS\IECodecPlg.dll
  O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
  O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
  O3 - Toolbar: FreshDownload Bar - {ED0E8CA5-42FB-4B18-997B-769E0408E79D} - C:\PROGRA~1\FRESHD~1\FRESHD~1\fdiebar.dll
  O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\zh-sg\msntb.dll
  O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
  O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
  O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
  O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
  O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
  O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
  O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
  O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
  O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
  O4 - HKLM\..\Run: [z-WrDialer] C:\Program Files\WinPoET Broadband Connection\WrDialer.exe
  O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
  O4 - HKLM\..\Run: [a-winpoet-service] "C:\Program Files\WinPoET Broadband Connection\winpppoverethernet.exe"
  O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
  O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
  O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
  O4 - Global Startup: BTTray.lnk = ?
  O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
  O4 - Global Startup: GetRight - Tray Icon.lnk = C:\Program Files\GetRight\getright.exe
  O8 - Extra context menu item: &Download with Download Accelerator Lite - C:\Program Files\Download Accelerator Lite\dal.htm
  O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm
  O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
  O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm
  O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\Creative\Bluetooth Software\btsendto_ie_ctx.htm
  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
  O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
  O9 - Extra button: FreshDownload - {92030D76-4AD1-499A-B969-77EFAA12EA9C} - C:\Program Files\FreshDevices\FreshDownload\fd.exe
  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
  O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Creative\Bluetooth Software\btsendto_ie.htm
  O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Creative\Bluetooth Software\btsendto_ie.htm
  O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\liew\Start Menu\Programs\IMVU\Run IMVU.lnk
  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
  O16 - DPF: {48884C41-EFAC-433D-958A-9FADAC41408E} (EGamesPlugin Class) - https://www.e-games.com.my/com/EGamesPlugin.cab
  O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
  O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
  O17 - HKLM\System\CCS\Services\Tcpip\..\{2383C3AB-46BE-4548-BDB4-3D387CD2DD1A}: NameServer = 165.21.83.88 165.21.100.88
  O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
  O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Creative\Bluetooth Software\bin\btwdins.exe
  O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
  O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
  O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
  O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
  O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
  O23 - Service: WinPPPoverEthernet - iVasion, a Routerware Company - C:\Program Files\WinPoET Broadband Connection\WrOS.EXE
  
  a long long log...
• snop_coolz

  1 Nov 06, 20:54

  how? how ? how?
  
  Btw. rams are new..hard disk are new..motherboard also barely a year...
• ndmmxiaomayi

  1 Nov 06, 21:09

  Please download ATF Cleaner by Atribune and save it to your desktop.
  
  

  [*]Please download AVG Anti-Spyware and save it to your desktop.
  [*]Double click on avgas-setup-7.5.0.50.exe to install AVG Anti-Spyware. Install it in the default location.
  [*]Once installed, start AVG Anti-Spyware by going to Start > All Programs > AVG Anti-Spyware 7.5 > AVG Anti-Spyware.
  [*]In the main screen, you should see Your Computer's Security.[list][*]Next to Resident Shield, click on Change state. It should now be Inactive.
  [*]Next to Automatic Updates, click on Change state. It should now be Inactive.
  [*]Next to Last Update, click on Update now. If your firewall prompts you, tell your firewall to allow it. Should you be unable to update it, download the updates from here. Save it to your desktop. Double click to run the installation and the updates will be installed. Make sure AVG Anti-Spyware is closed during the installation.
  [*]Right-click the AVG Anti-Spyware icon near the clock and uncheck (untick) Start with Windows. Confirm by clicking Yes.

  [*]Now click on the Scanner button at the top.
  [*]Select the Settings tab.
  [*]Under How to act?, click on Recommended actions and select Quarantine.
  [*]Under How to scan?, check (tick) all the boxes.
  [*]Under Possibly unwanted software:, check (tick) all the boxes.
  [*]Under Reports:, select Automatically generate report after every scan and uncheck (untick) the Only if threats were found box.
  [*]Under What to scan?, select Scan every file.[/list]Do not run a scan yet. You will run a scan later.
  ______________________
  
  Run HijackThis and select Do a system scan only.
  
  Tick the box beside this line and click Fix checked.
  
  O2 - BHO: CIEObjectObj Object - {CA13D72F-2DAC-4D99-B08D-C5EA1C920E89} - C:\WINDOWS\IECodecPlg.dll
  
  Restart into Safe Mode and delete this file in RED.
  
  C:\WINDOWS\IECodecPlg.dll
  
  You will need to enable hidden files in case it's hidden.
  
  Show hidden files and folders
  
  

  [*]Double click My Computer to open it or go to Start > My Computer.
  [*]Select Tools > Folder Options.
  [*]Select the View tab.
  [*]Scroll down to Hidden files and folders.
  [*]Select the Show hidden files and folders option.
  [*]Click OK to apply the settings.

  
  ______________________
  
  

  [*]Double-click ATF-Cleaner.exe to run the program.
  [*]Under Main choose: Select All.
  [*]Click the Empty Selected button.

  
  
  If you use Firefox browser
  
  

  [*]Click Firefox at the top and choose: Select All.
  [*]Click the Empty Selected button.
  [*]NOTE: If you would like to keep your saved passwords, please click No at the prompt.

  
  
  If you use Opera browser
  
  

  [*]Click Opera at the top and choose: Select All.
  [*]Click the Empty Selected button.
  [*]NOTE: If you would like to keep your saved passwords, please click No at the prompt.

  
  ______________________
  
  

  [*]Start AVG Anti-Spyware by going to Start > All Programs > AVG Anti-Spyware 7.5 > AVG Anti-Spyware.
  [*]Click on the Scanner button at the top.
  [*]Select the Scan tab.
  [*]Click on Complete System Scan to start the scan.
  [*]When the scan has finished, follow the instructions below.
  IMPORTANT: Don't click on the Save Scan Report button before you did hit the Apply all Actions button.
  [*]Make sure that Set all elements to: shows Quarantine (1), if not click on the link and choose Quarantine from the popup menu. (2)
  [*]At the bottom of the window click on the Apply all Actions button. (3)
  
  [*]When done, click the Save Scan Report button. (4)
  [*]Click the Save Report as button.
  [*]Save the report to your Desktop.
  [*]Right-click the AVG Anti-Spyware Tray Icon and select Exit. Confirm by clicking Yes.
  [*]Restart in Normal Mode.

  
  
  Please post a fresh HijackThis log and the AVG Anti-Spyware log.
• ndmmxiaomayi

  1 Nov 06, 21:11

  If after this still got problems...
  
  You have to bring to a PC shop to check for hardware problems. They will run the diagnostics tools and tell you if any hardware is faulty. If there is, tell them not to change anything. Bring it back to an authorized shop and exchange the parts since they are new.
  
  Then check again. If new hardware still gives problems... you might need to reinstall Windows.
• snop_coolz

  1 Nov 06, 22:15

  oh btw..donno if this help or not...fan running okay...and everytime i hang rite..its just the harddisk stop running...the light show so as its not flashing..and the power is still on..everything on screen just hanged there and freezed including the mouse...
  
  thanks for the list..m doin everything there now
• ndmmxiaomayi

  1 Nov 06, 23:48

  Originally posted by snop_coolz:

  oh btw..donno if this help or not...fan running okay...and everytime i hang rite..its just the harddisk stop running...the light show so as its not flashing..and the power is still on..everything on screen just hanged there and freezed including the mouse...
  
  thanks for the list..m doin everything there now

  Looks like it's hard disk problem. I would not ask you to defrag now though... it looks very unstable to defrag and may result in a reinstallation of Windows instead.
• snop_coolz

  2 Nov 06, 11:31

  oh ok thanks..nvm..guess would have to go back to my service guy to ask him check..thanks alot...
• snop_coolz

  10 Nov 06, 19:18

  ok ermm..if i take out my hard disk rite..and left it in the open...will the data inside spoil? *btw the hard disk new..maxtor make...*
• ndmmxiaomayi

  10 Nov 06, 23:25

  Originally posted by snop_coolz:

  ok ermm..if i take out my hard disk rite..and left it in the open...will the data inside spoil? *btw the hard disk new..maxtor make...*

  It won't, unless a magnet is near it or there are a lot of static charges.
  
  The best is not to leave it outside, since you won't know if there are any static charges.
• mochou

  11 Nov 06, 01:59

  This may sound stupid, but it worked based on my own experience.
  
  I had pc hang problem too, it's like very random, not that i run particular app, or i run many app. it can even hang when i idle. Assumed that it's software problem, i use different anti virus, different anti spyware. But problem still there. So i reinstall XP(with different copy of XP). It's still the same. My fren suggest me to change motherboard battery, but i dun think that's the problem bcos it's just half year old.
  
  So, in the end he suggested me to do something, which actually solved the problem!!!
  
  he asked me to open the casing, unplug everything and press it back, make sure it's secure. make sure it's not dusty at the contact points.
  
  It worked. No more random hang.
  
  You can try it if every other ways doesnt solve the problem.
  
  
• snop_coolz

  11 Nov 06, 08:59

  humm..sure? y is that so the computer will hang...anyway mine is comfirm becos of application becos only when i run "heavy" application then it will hang faster..if i just browse the internet..it can last up to 5h stright..but will give it a try and post result later
• mochou

  11 Nov 06, 12:44

  if you sure it's software problem, dun take the trouble to do so.
  
  As i said, only when every other ways doesnt solved the problem then try it.
  
• snop_coolz

  11 Nov 06, 18:22

  humm..does not work leh..maybe hard disk problem bah...so really comfirm putting the hard disk outside wont spoil it? cause i goin to use my old hard disk try see if its the hard disk spoil or mother board spoil..ps: old hard disk spoil but can be used after reformat..
• ndmmxiaomayi

  11 Nov 06, 23:01

  Originally posted by snop_coolz:

  humm..does not work leh..maybe hard disk problem bah...so really comfirm putting the hard disk outside wont spoil it? cause i goin to use my old hard disk try see if its the hard disk spoil or mother board spoil..ps: old hard disk spoil but can be used after reformat..

  In theory, of course won't.
  
  In real life, it doesn't, due to environmental conditions.
• snop_coolz

  11 Nov 06, 23:16

  humm..ok..
• snop_coolz

  2 Dec 06, 18:01

  --wrong post--
• snop_coolz

  2 Dec 06, 18:05

  Originally posted by R3SsH|n:

  try changing the cmos battery?

  Originally posted by monkeybusiness:

  it happen to my com last time too
  my fren helped me to change the batt on motherboard and it solved the problem...not sure whether does the problem lie with your batt...

  ermm..do u guys mean the same thing?? the cmos battery and motherboard battery...and how much does it cost to change the batt..roughly..
• snop_coolz

  2 Dec 06, 18:05

  oh and how much would it cost for a new dvd burner and reader..or cd burner and reader?
• ndmmxiaomayi

  2 Dec 06, 21:50

  http://sg.hardwarezone.com/priceguide/download.php
• snop_coolz

  2 Dec 06, 22:52

  ermm..wat about the motherboard battery...wat is it?? normal battery or special battery?
  
• ndmmxiaomayi

  3 Dec 06, 11:06

  It's a round battery...
  
  
  
  
• snop_coolz

  3 Dec 06, 14:47

  ohh..thanks alot..
• manyu882

  3 Dec 06, 15:57

  clue: motherboard unstable
  
  could be due to
  1. battery,
  2. a small little shortcircuit in mobo